wolfssh/src
John Safranek 65802d438c internal: commit a session only once accepted
A shell, exec or subsystem request changes the channel only once the
callback accepts it. The session type and command are set for the
callback to read and put back if it refuses, and CLIENT_DONE follows
acceptance alone, so wolfSSH_accept() stays where it is rather than
reporting a session it answered CHANNEL_FAILURE as established.

- DoChannelRequestSession() carries the three arms, which differed only
  in the type and the callback consulted
- a refusal puts the type and command back, so a grant an earlier
  request won still stands
- FreeChannelCommand() wipes and releases a command line for both
  ChannelDelete() and the refusal path
- unit.c drives a refused shell, exec and subsystem request through
  DoChannelRequest() and checks nothing was committed, and that a
  refusal after a grant puts the earlier command back whole
- regress.c checks accept() stays at ACCEPT_SERVER_CHANNEL_ACCEPT_SENT
  on a refused shell, and that the sftp gate and both diverts ask for
  the grant alone

Issue: F-8852
2026-09-14 14:48:15 -07:00
..
agent.c agent: commit the open on a completed flush 2026-09-08 11:50:40 -05:00
certman.c expand CI test for non-fpki build, fix check for error state with CertEnumCertificatesInStore, add extended key usage type check if present, fix for EKU checks with X509 use and add test case 2026-09-05 01:32:02 -07:00
include.am Add OpenSSH certificate user authentication 2026-07-27 23:30:20 -07:00
internal.c internal: commit a session only once accepted 2026-09-14 14:48:15 -07:00
io.c io: clean up Harmony send size clamp 2026-08-10 10:31:07 -06:00
keygen.c internal: Refactor and gate ML-DSA composite key handling 2026-09-02 15:35:09 -07:00
log.c F-4582 - Use WOLFSSH_ prefix for default logging callback opt-out 2026-07-20 17:24:02 -05:00
misc.c Use wolfCrypt's wc_ForceZero() 2026-07-17 15:17:36 -06:00
ossh.c internal: Refactor and gate ML-DSA composite key handling 2026-09-02 15:35:09 -07:00
port.c Fix remaining MinGW build errors in the regress/unit test build 2026-09-10 15:27:50 -07:00
ssh.c internal: commit a session only once accepted 2026-09-14 14:48:15 -07:00
wolfscp.c ssh, apps, examples: take the worker's status from its return 2026-09-14 10:40:48 -07:00
wolfsftp.c ssh, sftp: match the sftp subsystem name exactly 2026-09-10 17:14:23 -07:00
wolfterm.c Fix remaining MinGW build errors in the regress/unit test build 2026-09-10 15:27:50 -07:00