1. Forum
  2. DOVE-Net
  3. Synchronet Programming

  • src/sftp/sftp_server.c

    From Deuc¿@VERT to Git commit to main/sbbs/m on Sunday, March 15, 2026 16:01:00
    https://gitlab.synchro.net/main/sbbs/-/commit/762df3da7c4e688fa699d432
    Modified Files:
    src/sftp/sftp_server.c
    Log Message:
    Fix missing % in PRIu32 format strings in sftps_send_name()

    Three lprintf calls were missing the '%' before the second PRIu32,
    causing the count argument to be silently ignored in the output.

    Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

    ---
    þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net
  • From Deuc¿@VERT to Git commit to main/sbbs/m on Tuesday, August 11, 2026 11:04:00
    https://gitlab.synchro.net/main/sbbs/-/commit/d8737ae770fd972eefe53e34
    Modified Files:
    src/sftp/sftp_server.c
    Log Message:
    sftp: reject truncated INIT packets (CID 106519, CID 464917)

    Validate the packet's declared size before reading the version or deriving the extension payload length. This prevents the subtraction underflow and bounds the remotely controlled extension loop.

    Co-Authored-By: OpenAI Codex <noreply@openai.com>

    ---
    þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net