Tox & qTox client

Recent Commits

• Ghost of Sparta(15 Sept 26)

  docs: Translated using Weblate (Hungarian) Currently translated at 100.0% (693 of 693 strings) Translation: qTox/qTox Translate-URL: https://hosted.weblate.org/projects/qtox/qtox/hu/

• nickolay168(06 Sept 26)

  fix(chatform): diagnose friend going offline during call.

• Green Sky(24 Aug 26)

  fix: enable experimental toxcore thread safety This is currently required for thread safe toxav operations.

• floppy(05 Sept 26)

  fix: missing includes uncovered by clang-23 Signed-off-by: Green Sky <[email protected]>

• moliang(12 Aug 26)

  docs: Translated using Weblate (Chinese (Simplified Han script)) Currently translated at 99.7% (690 of 692 strings) Translation: qTox/qTox Translate-URL: https://hosted.weblate.org/projects/qtox/qtox/zh_Hans/

• Leonardo Pochiero(15 Jul 26)

  docs: Translated using Weblate (Italian) Currently translated at 90.1% (624 of 692 strings) Translation: qTox/qTox Translate-URL: https://hosted.weblate.org/projects/qtox/qtox/it/

• nickolay168(02 Sept 26)

  fix(video): uninitialized lock

• Green Sky(04 Sept 26)

  chore(ci): make docker wasm builder point to ghcr

• Green Sky(22 Aug 26)

  fix(gcc): gcc related failed sfinae warnings

• Green Sky(21 Aug 26)

  fix: various clang tidy reports

• Green Sky(21 Aug 26)

  chore(ci): switch from docker hub to github container registry

• Luke(14 Jul 26)

  test: add unit tests for SettingsSerializer readStream() input validation Covers the three guards added to readStream(): - OOM payload: VInt encoding 0x7FFFFFFF triggers the shift-count guard (num2 > sizeof(int)*CHAR_BIT), preventing QByteArray::resize(INT_MAX) - Shift overflow: 5 continuation bytes push shifts past 32 bits, exercising the same guard for the UB case - Truncated stream: premature EOF is caught by the QDataStream status check before each readRawData - Zero-size VInt: the post-loop num <= 0 guard rejects empty values - Valid settings: round-trips a key/value pair through the serializer - isSerializedFormat: verifies QTOX magic detection

• Luke(14 Jul 26)

  fix: Fix OOM crash in SettingsSerializer readStream() VInt decoder. readStream() had no bounds check on the VInt shift count or the accumulated size value before calling QByteArray::resize(), allowing a crafted settings file to trigger an unbounded allocation (up to 2GB) and immediate OOM crash. The signed left-shift also produced undefined behavior when the shift exceeded 28 bits. Add the same overflow guard used by dataToVInt() (num2 > sizeof(int) * CHAR_BIT), stream error status checks, and a post-loop validity check on the decoded size before allocation.

• Green Sky(18 Aug 26)

  fix(cmake): nix shell command was sensitive to cwd

• Peter J. Mello(20 Jun 26)

  docs: Translated using Weblate (Portuguese) Currently translated at 100.0% (692 of 692 strings) Translation: qTox/qTox Translate-URL: https://hosted.weblate.org/projects/qtox/qtox/pt/

• Ghost of Sparta(13 Jun 26)

  docs: Translated using Weblate (Hungarian) Currently translated at 100.0% (692 of 692 strings) Translation: qTox/qTox Translate-URL: https://hosted.weblate.org/projects/qtox/qtox/hu/

• ssantos(10 Jun 26)

  docs: Translated using Weblate (Portuguese) Currently translated at 100.0% (692 of 692 strings) Translation: qTox/qTox Translate-URL: https://hosted.weblate.org/projects/qtox/qtox/pt/

• nickolay168(30 Mar 26)

  fix(chatform): Do not interpret 祝 and 秘 as smileys.

• github-actions[bot](02 Jun 26)

  chore: Release v1.18.5 Another release focused on bug fixes and stability. Keep it safe out there.

• Green Sky(30 May 26)

  chore(flatpak): update toxcore to 0.2.23-rc.2

• iphydf(17 May 26)

  chore: Restrict objc_library to macOS and update reference images.

• github-actions[bot](16 May 26)

  chore: Release v1.18.5-rc.1 Another release with a focus on stability.

• Ghost of Sparta(04 May 26)

  docs: Translated using Weblate (Hungarian) Currently translated at 100.0% (692 of 692 strings) Translation: qTox/qTox Translate-URL: https://hosted.weblate.org/projects/qtox/qtox/hu/

• The Cats(23 Apr 26)

  docs: Translated using Weblate (Spanish) Currently translated at 100.0% (692 of 692 strings) Translation: qTox/qTox Translate-URL: https://hosted.weblate.org/projects/qtox/qtox/es/

• The Cats(19 Mar 26)

  docs: Translated using Weblate (French) Currently translated at 100.0% (692 of 692 strings) Translation: qTox/qTox Translate-URL: https://hosted.weblate.org/projects/qtox/qtox/fr/

• The Cats(19 Mar 26)

  docs: Translated using Weblate (Spanish) Currently translated at 100.0% (692 of 692 strings) Translation: qTox/qTox Translate-URL: https://hosted.weblate.org/projects/qtox/qtox/es/

• The Cats(19 Mar 26)

  docs: Translated using Weblate (Portuguese (Brazil)) Currently translated at 100.0% (692 of 692 strings) Translation: qTox/qTox Translate-URL: https://hosted.weblate.org/projects/qtox/qtox/pt_BR/

• iphydf(03 Mar 26)

  fix: Fix crash on shutdown when conference join/leave messages are enabled. `ChatManager` owns the `IChatLog` and `FriendChatState` that `ChatForm` and `ConferenceForm` hold by reference. Destroying the model first left dangling references, causing a use-after-free when form destructors accessed them (e.g. `ConferenceForm::~ConferenceForm` adding a "left conference" system message).

• iphydf(01 Mar 26)

  refactor: Extract ChatManager from Widget to separate model from UI Move per-friend and per-conference model state (dispatchers, chat logs, chatrooms) and Core signal handlers for lifecycle/message-routing from Widget into a new ChatManager class. Widget keeps all UI state and creates UI elements in response to ChatManager signals.

• iphydf(28 Feb 26)

  refactor: Split libraries.