mirror of
https://github.com/2dust/v2rayN.git
synced 2026-04-16 12:35:46 +00:00
A GUI client for Windows and Linux, support Xray core and v2fly core and others
7647c46175
This report documents 25 issues found during automated code review: - 2 critical security vulnerabilities (ZIP Slip, command injection risks) - 5 high severity issues (empty catch blocks, race conditions) - 8 medium severity issues (insufficient cancellation, async anti-patterns) - 5 low severity issues (hardcoded delays, code quality) - 5 code quality improvements Key findings: - ZIP Slip vulnerability in FileUtils.cs allowing path traversal - 12+ empty catch blocks silently swallowing exceptions - Race conditions in process lifecycle management - Only 2.4% of async methods use CancellationToken (11/452) - Task.Factory.StartNew anti-pattern in database code - Fire-and-forget async patterns leading to unhandled exceptions Report includes prioritized remediation plan and recommendations. |
||
|---|---|---|
| .github | ||
| v2rayN | ||
| .editorconfig | ||
| .gitattributes | ||
| .gitignore | ||
| .gitmodules | ||
| BUG_REPORT.md | ||
| LICENSE | ||
| package-debian.sh | ||
| package-osx.sh | ||
| package-release-zip.sh | ||
| package-rhel.sh | ||
| README.md | ||
