1. Forum
  2. FidoNet
  3. SYNC PROGRAMMING

  • src/sftp/sftp_server.c

    From Rob Swindell (on Windows 11)@1:103/705 to Git commit to main/sbbs/master on Sat Mar 2 22:25:20 2024
    https://gitlab.synchro.net/main/sbbs/-/commit/506f82f63244b48145ac8024
    Modified Files:
    src/sftp/sftp_server.c
    Log Message:
    Fix typo in log message. I use a code editor with a spell checker. <shrug>
    --- SBBSecho 3.20-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Deucе@1:103/705 to Git commit to main/sbbs/master on Thu Mar 7 13:57:57 2024
    https://gitlab.synchro.net/main/sbbs/-/commit/718f3cadfdf64149f13ba4b7
    Modified Files:
    src/sftp/sftp_server.c
    Log Message:
    Fix warning in mingw32 builds about vasprintf()
    --- SBBSecho 3.20-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Deucе@1:103/705 to Git commit to main/sbbs/master on Tue Aug 11 11:04:02 2026
    https://gitlab.synchro.net/main/sbbs/-/commit/d8737ae770fd972eefe53e34
    Modified Files:
    src/sftp/sftp_server.c
    Log Message:
    sftp: reject truncated INIT packets (CID 106519, CID 464917)

    Validate the packet's declared size before reading the version or deriving the extension payload length. This prevents the subtraction underflow and bounds the remotely controlled extension loop.

    Co-Authored-By: OpenAI Codex <[email protected]>
    --- SBBSecho 3.37-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)