• Stefy Lanza (nextime / spora )'s avatar
    Fix memory corruption in wssshd tunnel request parameter extraction · 4505d02e
    Stefy Lanza (nextime / spora ) authored
    - Added bounds checking and validation for enc, service, and version parameter extraction
    - Prevent buffer overflows by limiting parameter lengths to reasonable sizes (< 32 chars)
    - Added null pointer and bounds validation before string operations
    - Increased request_msg buffer size from 512 to 1024 bytes for safety
    - Fixed potential heap corruption that was causing 'malloc(): invalid next size' errors
    4505d02e
websocket.c 49.1 KB