1. Forum
  2. DOVE-Net
  3. Synchronet Programming

  • src/sftp/sftp_server.c

    From Deuc¿@VERT to Git commit to main/sbbs/master on Sun Mar 15 16:01:53 2026
    https://gitlab.synchro.net/main/sbbs/-/commit/762df3da7c4e688fa699d432
    Modified Files:
    src/sftp/sftp_server.c
    Log Message:
    Fix missing % in PRIu32 format strings in sftps_send_name()

    Three lprintf calls were missing the '%' before the second PRIu32,
    causing the count argument to be silently ignored in the output.

    Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
    ---
    þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net
  • From Deuc¿@VERT to Git commit to main/sbbs/master on Tue Aug 11 11:04:02 2026
    https://gitlab.synchro.net/main/sbbs/-/commit/d8737ae770fd972eefe53e34
    Modified Files:
    src/sftp/sftp_server.c
    Log Message:
    sftp: reject truncated INIT packets (CID 106519, CID 464917)

    Validate the packet's declared size before reading the version or deriving the extension payload length. This prevents the subtraction underflow and bounds the remotely controlled extension loop.

    Co-Authored-By: OpenAI Codex <noreply@openai.com>
    ---
    þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net