Signal RingRTC call FSM queue saturation prevents local hangup teardown

#!/usr/bin/env pwsh
# Check-RingRTC-CVE2026113380.ps1
# Checks whether Signal Desktop is installed and whether its version
# is likely to bundle a patched RingRTC (>= 2.72.0).
# Exit codes: 1 = VULNERABLE, 0 = PATCHED, 2 = UNKNOWN

$ErrorActionPreference = 'SilentlyContinue'

# Signal Desktop default install paths
$candidates = @(
    "$env:LOCALAPPDATA\Programs\signal-desktop\Signal.exe",
    "$env:LOCALAPPDATA\signal-desktop\Signal.exe",
    "${env:ProgramFiles}\Signal\Signal.exe",
    "${env:ProgramFiles(x86)}\Signal\Signal.exe"
)

$signalExe = $null
foreach ($p in $candidates) {
    if (Test-Path $p) { $signalExe = $p; break }
}

if (-not $signalExe) {
    Write-Host "UNKNOWN - Signal Desktop not found on this host."
    exit 2
}

$version = (Get-Item $signalExe).VersionInfo.ProductVersion
if (-not $version) {
    Write-Host "UNKNOWN - Signal Desktop found at $signalExe but could not read version."
    exit 2
}

Write-Host "Signal Desktop version: $version (at $signalExe)"

# RingRTC 2.72.0 shipped with Signal Desktop ~7.30+.
# We check for the ringrtc native module timestamp as a secondary signal.
$resourceBase = Split-Path $signalExe
$ringrtcPaths = @(
    (Join-Path $resourceBase 'resources\app.asar.unpacked\node_modules\@aspect\ringrtc'),
    (Join-Path $resourceBase 'resources\app.asar.unpacked\node_modules\@aspect\signal-ringrtc-node'),
    (Join-Path $resourceBase 'resources\app.asar.unpacked\node_modules\ringrtc')
)

$foundRingrtc = $false
foreach ($rp in $ringrtcPaths) {
    if (Test-Path $rp) {
        $foundRingrtc = $true
        $pkgJson = Join-Path $rp 'package.json'
        if (Test-Path $pkgJson) {
            $pkg = Get-Content $pkgJson -Raw | ConvertFrom-Json
            $rtcVer = $pkg.version
            if ($rtcVer) {
                Write-Host "RingRTC version: $rtcVer"
                $parts = $rtcVer.Split('.')
                $major = [int]$parts[0]
                $minor = [int]$parts[1]
                if (($major -gt 2) -or ($major -eq 2 -and $minor -ge 72)) {
                    Write-Host "PATCHED - RingRTC $rtcVer >= 2.72.0. CVE-2026-113380 is fixed."
                    exit 0
                } else {
                    Write-Host "VULNERABLE - RingRTC $rtcVer < 2.72.0. CVE-2026-113380 applies."
                    exit 1
                }
            }
        }
        break
    }
}

if (-not $foundRingrtc) {
    # Fallback: report Signal version and let the operator decide
    Write-Host "UNKNOWN - Could not locate RingRTC module to confirm version."
    Write-Host "Signal Desktop $version is installed. Verify manually that it bundles RingRTC >= 2.72.0."
    exit 2
}