• src/sftp/sftp_server.c

    From Rob Swindell (on Windows 11)@VERT to Git commit to main/sbbs/master on Sat Mar 2 22:25:20 2024
    https://gitlab.synchro.net/main/sbbs/-/commit/506f82f63244b48145ac8024
    Modified Files:
    src/sftp/sftp_server.c
    Log Message:
    Fix typo in log message. I use a code editor with a spell checker. <shrug>

    ---
    ■ Synchronet ■ Vertrauen ■ Home of Synchronet ■ [vert/cvs/bbs].synchro.net
  • From Deucе@VERT to Git commit to main/sbbs/master on Thu Mar 7 13:57:57 2024
    https://gitlab.synchro.net/main/sbbs/-/commit/718f3cadfdf64149f13ba4b7
    Modified Files:
    src/sftp/sftp_server.c
    Log Message:
    Fix warning in mingw32 builds about vasprintf()

    ---
    ■ Synchronet ■ Vertrauen ■ Home of Synchronet ■ [vert/cvs/bbs].synchro.net
  • From Deucе@VERT to Git commit to main/sbbs/master on Sun Mar 15 16:01:53 2026
    https://gitlab.synchro.net/main/sbbs/-/commit/762df3da7c4e688fa699d432
    Modified Files:
    src/sftp/sftp_server.c
    Log Message:
    Fix missing % in PRIu32 format strings in sftps_send_name()

    Three lprintf calls were missing the '%' before the second PRIu32,
    causing the count argument to be silently ignored in the output.

    Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

    ---
    ■ Synchronet ■ Vertrauen ■ Home of Synchronet ■ [vert/cvs/bbs].synchro.net
  • From Deucе@VERT to Git commit to main/sbbs/master on Tue Aug 11 11:04:02 2026
    https://gitlab.synchro.net/main/sbbs/-/commit/d8737ae770fd972eefe53e34
    Modified Files:
    src/sftp/sftp_server.c
    Log Message:
    sftp: reject truncated INIT packets (CID 106519, CID 464917)

    Validate the packet's declared size before reading the version or deriving the extension payload length. This prevents the subtraction underflow and bounds the remotely controlled extension loop.

    Co-Authored-By: OpenAI Codex <noreply@openai.com>

    ---
    ■ Synchronet ■ Vertrauen ■ Home of Synchronet ■ [vert/cvs/bbs].synchro.net