NixMsg

[L-05][medium] 后台静态页没有前端路由回退：刷新或直接打开二级页面返回 404，访问目录会列出文件 P2-medium lane/listener review-2026-09-30

#24

by nixevol was closed 2026-09-30 16:35:56 +08:00

1

[L-04][high] NixMsg 直接终止 TLS 时 r.TLS 为空，后台 Cookie 不带 Secure P1-high lane/listener review-2026-09-30

#23

by nixevol was closed 2026-09-30 16:35:55 +08:00

1

[L-03][high] 有 MQTT 连接时停机退不出，还可能向已关闭通道发送而 panic P1-high lane/listener review-2026-09-30

#22

by nixevol was closed 2026-09-30 16:35:55 +08:00

2

[L-02][high] accept 出一次错就永久停止接受新连接 P1-high lane/listener review-2026-09-30

#21

by nixevol was closed 2026-09-30 16:35:54 +08:00

1

[L-01][high] 握手前阶段没有超时与并发上限：TLS 握手、CONNECT 之前、WebSocket 升级后、HTTP 空闲长连接都能无限占用资源 P1-high lane/listener review-2026-09-30

#20

by nixevol was closed 2026-09-30 16:35:53 +08:00

1

[B-12][medium] 认证没有超时与并发上限：argon2 排队无界、并发尝试可绕过锁定、PHC 参数写死 P2-medium lane/broker lane/identity review-2026-09-30

#19

by nixevol was closed 2026-09-30 16:35:53 +08:00

1

[B-11][high] 令牌"30 天没用"按最后一次认证时间算，一直在线的设备重连会被判失效 P1-high lane/broker review-2026-09-30

#18

by nixevol was closed 2026-09-30 16:35:52 +08:00

1

[B-10][high] 密码校验与写库不是原子的：重置、停用、删除期间的登录、改密、退出会越过管理员操作 P1-high lane/broker lane/identity review-2026-09-30

#17

by nixevol was closed 2026-09-30 16:35:51 +08:00

1

[B-09][high] 连接生命周期没有串行化：握手与断线交错时断开的连接被标成在线，在线判定多处来源互相不一致 P1-high lane/broker review-2026-09-30

#16

by nixevol was closed 2026-09-30 16:35:51 +08:00

1

[B-08][medium] broker 上行队列按编号创建后永不回收；停机时关闭通道可能 panic（为 L-03 提供 Broker.Shutdown） P2-medium lane/broker review-2026-09-30

#15

by nixevol was closed 2026-09-30 16:35:50 +08:00

1

[B-07][medium] mochi 报错日志会写出整个包：CONNECT 里的密码与会话令牌、PUBLISH 正文进入日志 P2-medium lane/broker review-2026-09-30

#14

by nixevol was closed 2026-09-30 16:35:49 +08:00

1

[B-06][medium] PublishDown 不校验目标是否仍是当前且已订阅的连接：顶号窗口内旧连接的帧发给新连接、握手前的帧推进空主题 P2-medium lane/broker review-2026-09-30

#13

by nixevol was closed 2026-09-30 16:35:49 +08:00

1

[B-05][critical] 认证失败的连接永久留在 broker 连接表，无需凭据即可耗尽内存并拖慢所有按连接查找 P0-critical lane/broker review-2026-09-30

#12

by nixevol was closed 2026-09-30 16:35:48 +08:00

1

[B-04][medium] 停用/删除/重置密码/退出登录靠固定 sleep 等下行写出再断开，且有两条断开路径赛跑，fatal 与 resp 可能丢失 P2-medium lane/broker review-2026-09-30

#11

by nixevol was closed 2026-09-30 16:35:48 +08:00

1

[B-03][high] 慢客户端写阻塞时，向它发布 QoS1 会卡住调用线程，messageLoops 与其他端的处理被连带冻结 P1-high lane/broker review-2026-09-30

#10

by nixevol was closed 2026-09-30 16:35:47 +08:00

1

[B-02][critical] broker 大帧名额收到 PUBACK 时从不归还，累计 64 条大帧后 PublishDown 永久阻塞、messageLoops 冻结 P0-critical lane/broker review-2026-09-30

#9

by nixevol was closed 2026-09-30 16:35:46 +08:00

1

[B-01][critical] 客户端 CONNECT 带 Receive Maximum 时 mochi 发送配额路径递归读锁死锁，单个客户端即可冻结全站下发 P0-critical lane/broker review-2026-09-30

#8

by nixevol was closed 2026-09-30 16:35:46 +08:00

1

[总览] 2026-09-30 全量复审：问题清单、统一方案与并行修复计划 review-2026-09-30 tracking

#7

by nixevol was closed 2026-09-30 16:40:22 +08:00

2

[T-01][medium] 测试 WS 客户端不按字节流拆包、并发写不加锁，被误判为服务端死锁；移除群事件 20ms 绕过 P2-medium lane/test-docs review-2026-09-30

#3

by nixevol was closed 2026-09-30 16:35:45 +08:00

4