Search results

TOCTOU race in database file swap (acknowledged as "racy as hell")

Status: Open.

#720 In TokTok/qTox;

· grisutheguru opened on Apr 20, 2026

IPC: busy-wait in waitUntilAccepted() and unauthenticated shared memory

Status: Open.

#719 In TokTok/qTox;

· grisutheguru opened on Apr 20, 2026

Memory bugs in video/audio pipeline: AVFrame leak, double-free, integer truncation

Status: Open.

#718 In TokTok/qTox;

· grisutheguru opened on Apr 20, 2026

Predictable PRNG: rand() for TCP port, clock-seeded mt19937 for bootstrap shuffle

Status: Open.

#717 In TokTok/qTox;

· grisutheguru opened on Apr 20, 2026

Sensitive files created without restrictive permissions

Status: Open.

#716 In TokTok/qTox;

· grisutheguru opened on Apr 20, 2026

Profile name not sanitized in file paths and autorun entries

Status: Open.

#715 In TokTok/qTox;

· grisutheguru opened on Apr 20, 2026

Crash signal handler calls non-async-signal-safe functions

Status: Open.

#714 In TokTok/qTox;

· grisutheguru opened on Apr 20, 2026

Encryption key material not securely wiped from memory

Status: Open.

#713 In TokTok/qTox;

· grisutheguru opened on Apr 20, 2026

Race condition: cancelCall() sets isCancelling without holding lock

Status: Open.

#712 In TokTok/qTox;

· grisutheguru opened on Apr 20, 2026

Bug: Uninitialized pointer ReadWriteLocker::lock_ causes UB on error paths

Status: Open.

#711 In TokTok/qTox;

· grisutheguru opened on Apr 20, 2026

Race condition: TOCTOU in VideoFrame::fromAVFrame lock upgrade

Status: Open.

#710 In TokTok/qTox;

· grisutheguru opened on Apr 20, 2026

Use-after-free: delete this in CoreVideoSource::unsubscribe and CameraDevice::close

Status: Open.

#709 In TokTok/qTox;

· grisutheguru opened on Apr 20, 2026