mirror of https://github.com/wolfSSL/wolfssh.git
d3fbc8676e
RFC 4254 sec 6.5 lets only one shell, exec or subsystem request succeed per channel. DoChannelRequestSession() now refuses any request after the first grant without asking a callback, so the granted session and its command stand. - a refusal before any grant leaves the channel with no command - ssh.h documents the refusal; wolfsshd's own check is defence in depth - regress.c sends a second exec, shell and subsystem after a granted exec, and a second exec over a generic-callback grant - unit.c expects a shell after an exec to be refused and checks that a refused exec's command is scrubbed |
||
|---|---|---|
| .. | ||
| wolfssh | ||
| wolfsshd | ||
| include.am | ||
| wolfssh-options.c | ||