https://gitlab.synchro.net/main/sbbs/-/commit/188acf9672d51a40425c7bad
Modified Files:
src/ssh/ssh-auth.c ssh-trans.c ssh-trans.h src/ssh/test/CMakeLists.txt test_transport_errors.c
Log Message:
auth: cleanse password packet before releasing TX lock (CID 505204)
Password authentication serialized secrets into the session's shared TX buffer, then cleansed that buffer only after send_commit released tx_mtx. Another sender could acquire the mutex and reuse the buffer before the cleanse, allowing the old cleanup to corrupt its packet.
Add a sensitive commit path that scrubs the bounded payload while tx_mtx is still held and before any termination callback. Cover direct, gathered, failure, and oversized-payload paths with focused tests.
Co-Authored-By: OpenAI Codex <
noreply@openai.com>
---
￭ Synchronet ￭ Vertrauen ￭ Home of Synchronet ￭ [vert/cvs/bbs].synchro.net