• Stefy Lanza (nextime / spora )'s avatar
    Add comprehensive bounds checking to WebSocket message parsing in wsssht.c · c68b4134
    Stefy Lanza (nextime / spora ) authored
    - Prevent heap corruption from malformed JSON messages
    - Add bounds validation for all string operations in message parsing
    - Ensure all pointers stay within payload buffer limits
    - Validate data field lengths to prevent excessive memory allocation
    - Protect against buffer overflows in tunnel_data, tunnel_close, tunnel_keepalive, tunnel_ack, and tunnel_ko message parsing
    - Add debug logging for malformed messages to aid troubleshooting
    c68b4134
Name
Last commit
Last update
..
debian Loading commit data...
libwsssht Loading commit data...
man Loading commit data...
configure.sh Loading commit data...
wsscp.c Loading commit data...
wsscp.h Loading commit data...
wsssh.c Loading commit data...
wsssh.h Loading commit data...
wssshc.c Loading commit data...
wsssht.c Loading commit data...