mirror of https://github.com/wolfSSL/wolfssh.git
9c8caea8b5
An application vetting an exec or subsystem request in its channel request callback is handed the command as a C string, which stops at an embedded NUL. wolfSSH_ChannelGetSessionCommandSz() and wolfSSH_GetSessionCommandSz() report the parsed wire length, so a callback can match a name whole the way DoChannelRequest() does. - both accessors report 0 for a NULL channel or session - wolfSSH_GetSessionCommand() defers to the channel accessor - the sftp divert in wolfSSH_accept() asks the accessor for the length - correct the trace name in wolfSSH_ChannelGetSessionCommand() - cover a callback seeing "sftp\0evil" through exec and subsystem |
||
|---|---|---|
| .. | ||
| agent.h | ||
| certman.h | ||
| certs_test.h | ||
| error.h | ||
| include.am | ||
| internal.h | ||
| keygen.h | ||
| log.h | ||
| misc.h | ||
| ossh.h | ||
| port.h | ||
| settings.h | ||
| ssh.h | ||
| test.h | ||
| version.h | ||
| version.h.in | ||
| visibility.h | ||
| wolfscp.h | ||
| wolfsftp.h | ||