1. Forum
  2. DOVE-Net
  3. Synchronet Programming

  • src/sftp/sftp_server.c

    From Rob Swindell (on Windows 11)@VERT to Git commit to main/sbbs/master on Saturday, March 02, 2024 22:25:20
    https://gitlab.synchro.net/main/sbbs/-/commit/506f82f63244b48145ac8024
    Modified Files:
    src/sftp/sftp_server.c
    Log Message:
    Fix typo in log message. I use a code editor with a spell checker. <shrug>
    ---
    ■ Synchronet ■ Vertrauen ■ Home of Synchronet ■ [vert/cvs/bbs].synchro.net
  • From Deuc¿@VERT to Git commit to main/sbbs/master on Thursday, March 07, 2024 13:57:57
    https://gitlab.synchro.net/main/sbbs/-/commit/718f3cadfdf64149f13ba4b7
    Modified Files:
    src/sftp/sftp_server.c
    Log Message:
    Fix warning in mingw32 builds about vasprintf()
    ---
    ■ Synchronet ■ Vertrauen ■ Home of Synchronet ■ [vert/cvs/bbs].synchro.net
  • From Deuc¿@VERT to Git commit to main/sbbs/master on Tuesday, August 11, 2026 11:04:02
    https://gitlab.synchro.net/main/sbbs/-/commit/d8737ae770fd972eefe53e34
    Modified Files:
    src/sftp/sftp_server.c
    Log Message:
    sftp: reject truncated INIT packets (CID 106519, CID 464917)

    Validate the packet's declared size before reading the version or deriving the extension payload length. This prevents the subtraction underflow and bounds the remotely controlled extension loop.

    Co-Authored-By: OpenAI Codex <[email protected]>
    ---
    ■ Synchronet ■ Vertrauen ■ Home of Synchronet ■ [vert/cvs/bbs].synchro.net