commit c74330aa474c689aa9a0add066ac4796a463f820 [browse]
Author: dependabot[bot]
Date: 2023-02-18 16:06:17 +11:00

Bump golang.org/x/net from 0.5.0 to 0.7.0 (#819)

Bumps [golang.org/x/net](https://github.com/golang/net) from 0.5.0 to 0.7.0.
- [Release notes](https://github.com/golang/net/releases)
- [Commits](https://github.com/golang/net/compare/v0.5.0...v0.7.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit 81201050bcc05c68eff4b8a3bb156663aed8d96d)

commit ceb7b2443ab9f744c87bdaa4ac06268021ef208d [browse]
Author: dependabot[bot]
Date: 2023-02-14 08:15:15 +11:00

Bump github.com/pion/dtls/v2 from 2.1.5 to 2.2.4 (#814)

Bumps [github.com/pion/dtls/v2](https://github.com/pion/dtls) from 2.1.5 to 2.2.4.
- [Release notes](https://github.com/pion/dtls/releases)
- [Commits](https://github.com/pion/dtls/compare/v2.1.5...v2.2.4)

---
updated-dependencies:
- dependency-name: github.com/pion/dtls/v2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

commit abb5cbc96e301a4ca1f5df698b105ae8553ce1e9 [browse]
Author: Matt Joiner
Date: 2023-02-13 23:27:15 +11:00

Check for chunks overflowing piece bounds on request read

Test for integer overflow in when checking read requests are within the bounds of the associated piece. Another fix is required to limit the amount of memory that can be allocated for such requests.

commit 60fd7581e774c14a4d370b90672012b58a2739f4 [browse]
Author: Colin Marc
Date: 2023-02-13 04:26:03 +01:00

Remove unecessary completion "set" (#812)

If the file has never been downloaded, complete will naturally be false. It's
not necessary to then set it false again unless it was actually claimed to be
true in the first place.

In my tests, using the boltdb completion thingy with fsync turned *on*, this
reduced the cold start for big buck bunny from multiple seconds to just a few
ms.

commit 5a185c45c08c96b5fc5c219ef1d85d9b3df9a458 [browse]
Author: Spencer Comfort
Date: 2023-01-30 16:41:06 -05:00

Update codeql analysis to v2 (#806)

Updates the outdated codeql analysis actions to v2