2 Commits

Author	SHA1	Message	Date
Houmgaor	604d53d6d7	fix(channelserver): validate packet fields before use in handlers ... Several handlers used packet fields as array indices or SQL column names without bounds checking, allowing crafted packets to panic the server or produce malformed SQL. Panic fixes (high severity): - handlers_mail: bounds check AccIndex against mailList length - handlers_misc: validate ArmourID >= 10000 and MogType <= 4 - handlers_mercenary: check RawDataPayload length before slicing - handlers_house: check RawDataPayload length in SaveDecoMyset - handlers_register: guard empty RawDataPayload in OperateRegister SQL column name fixes (medium severity): - handlers_misc: early return on unknown PointType - handlers_items: reject unknown StampType in weekly stamp handlers - handlers_achievement: cap AchievementID at 32 - handlers_goocoo: skip goocoo.Index > 4 - handlers_house: cap BoxIndex for warehouse operations - handlers_tower: fix MissionIndex=0 bypassing normalization guard	2026-02-19 00:23:04 +01:00
Houmgaor	9e8dc034be	refactor(channelserver): split handlers.go into goocoo, scenario, and misc files ... Replace the grab-bag handlers.go with thematically organized files: - handlers_goocoo.go: Goocoo/Guacot pet handlers - handlers_scenario.go: Scenario counter struct and handler - handlers_misc.go: remaining unrelated handlers (etc points, earth, equip skin history, trend weapons, minidata, lobby crowd, etc.)	2026-02-18 19:42:59 +01:00