mirror of https://github.com/wolfSSL/wolfssh.git
9281b03898
CheckAlgoList() skips unknown names, but the setters keep the caller's string and SendKexInit() sends it verbatim. Every name in the list now has to be at most 64 bytes of printable US-ASCII with no space and at most one '@', not first or last, per RFC 4251 Section 6 and RFC 4250 Section 4.6, or the setter returns WS_INVALID_ALGO_ID. - internal.h: add WOLFSSH_MAX_ALGO_NAME_SZ for the 64-byte cap - api.c: cover the 64/65-byte bound, space, tab, DEL, high bytes, the at-sign count and an at-sign at either end - ssh.h: state the name format in the setter contract Issue: F-15529 |
||
|---|---|---|
| .. | ||
| api.c | ||
| api.h | ||
| auth.c | ||
| auth.h | ||
| include.am | ||
| kex.c | ||
| kex.h | ||
| regress.c | ||
| sftp.c | ||
| sftp.h | ||
| testsuite.c | ||
| testsuite.h | ||
| unit.c | ||
| unit.h | ||