https://gitlab.synchro.net/main/sbbs/-/commit/d8737ae770fd972eefe53e34
Modified Files:
src/sftp/sftp_server.c
Log Message:
sftp: reject truncated INIT packets (CID 106519, CID 464917)
Validate the packet's declared size before reading the version or deriving the extension payload length. This prevents the subtraction underflow and bounds the remotely controlled extension loop.
Co-Authored-By: OpenAI Codex <
noreply@openai.com>
--- SBBSecho 3.37-Linux
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)