Broker, client, and MQTT v5 packet validation and reliability fixes#552

Open

aidangarske wants to merge 31 commits into

fenrir-highmed-fixes

Commits on Jun 11, 2026

F-3825 F-4050 F-4051 F-4052 F-4059 - Harden v5 unsubscribe reject and sub/unsub property cleanup
aidangarske
committed
F-4244 F-4307 - Defer WebSocket close during publish fan-out and snapshot sub iterator
aidangarske
committed
F-4246 F-4247 - Reject v5 empty topic without alias and zero subscription identifier
aidangarske
committed
F-4245 F-4249 - Reject overlong static topics and clamp v5 will delay interval
aidangarske
committed
F-4304 F-4654 F-4655 F-4722 F-4723 F-4727 F-4729 F-4776 F-4933 - Sanitize peer strings in broker log sinks
aidangarske
committed
F-4305 F-4652 - Validate broker CONNECT credentials before any session-state mutation
aidangarske
committed
F-4308 F-4653 - Reject v5 zero topic alias and cap dynamic retained-message list
aidangarske
committed
F-4529 - Add MqttClient_Subscribe broker-rejection regression test
aidangarske
committed
F-4657 F-4658 - Validate v5 response topic and cap per-message property count
aidangarske
committed
F-4656 - Cap per-client broker subscriptions to prevent table exhaustion
aidangarske
committed
F-4928 F-4929 F-4991 - Enforce TLS peer verification in example verify callbacks
aidangarske
committed
F-5766 F-5767 F-5768 F-5769 F-5861 - Sanitize broker-controlled strings in example log output
aidangarske
committed
F-4724 F-4772 - Fix firmware client length-overflow and topic-gate bypass
aidangarske
committed
F-5148 - Prevent broker client double-free on re-entrant takeover close
aidangarske
committed

Commits on Jun 12, 2026