Jakub Jelen 8ed9f5e69b sftpserver: Reuse ssh_{read,write}n ...

This removes the code reported by the following coverity issue:

 *** CID 1548867:  Insecure data handling  (INTEGER_OVERFLOW)

Signed-off-by: Jakub Jelen <jjelen@redhat.com>
Reviewed-by: Sahana Prasad <sahana@redhat.com>
Reviewed-by: Eshan Kelkar <eshankelkar@galorithm.com>

2024-07-18 21:37:12 +02:00

..

ABI

API: Bump SO version to 4.9.0

2022-07-02 07:04:48 +02:00

external

external: Update OpenSSH blowfish implementation

2024-05-21 11:33:17 +02:00

threads

threads/libcrypto.c: Remove no longer supported openssl versions

2022-10-31 16:33:44 +01:00

agent.c

agent: Avoid memory leaks

2023-05-04 16:55:17 +02:00

auth.c

mbedtls: Avoid memory leak when handling ECDSA keys

2024-07-02 15:57:45 +02:00

base64.c

base64: Use SSH_BUFFER_FREE()

2019-12-09 16:08:03 +01:00

bignum.c

bignum: Avoid trailing newline in log message

2023-12-05 14:45:51 +01:00

bind_config.c

SSH_LOG_DEBUG: Recategorize loglevels

2022-10-07 09:13:19 +02:00

bind.c

refactor: wrap and move server session options in a new struct

2024-06-17 15:42:10 +02:00

buffer.c

make ssh_buffer_pack_va() static

2024-06-28 17:18:08 +02:00

callbacks.c

log: fixes legacy fallback for multiple sessions.

2024-04-29 08:42:26 +02:00

chachapoly.c

Fix multiple spelling and grammar mistakes

2022-05-02 19:05:51 +02:00

channels.c

fix: sftp_packet_read stuck in an infinite loop in blocking mode

2024-07-01 13:22:35 +00:00

client.c

feat: implement proxy jump using libssh

2024-07-11 14:46:13 +02:00

CMakeLists.txt

Rework the coverage build

2024-03-08 13:34:23 +01:00

config_parser.c

Check any input username for validity

2024-01-15 10:49:58 +01:00

config.c

feat: implement proxy jump using libssh

2024-07-11 14:46:13 +02:00

connect.c

CVE-2023-6004: misc: Add ipv6 link-local check for an ip address

2023-12-18 17:32:00 +01:00

connector.c

connector: Fix cycle condition to avoid possible underflow

2024-07-18 21:36:54 +02:00

crypto_common.c

crypto: Use stdint types and make code more readable of secure_memcmp()

2022-06-20 09:18:59 +02:00

curve25519.c

CVE-2023-48795: client side mitigation

2023-12-18 17:35:04 +01:00

dh_crypto.c

Fix memory leaks of bignums when openssl >= 3.0

2022-11-29 14:16:01 +01:00

dh_key.c

Fix various spelling issues reported by codespell

2022-10-12 13:50:38 +02:00

dh-gex.c

dh-gex: Avoid theoretical integer underflow

2024-07-18 21:36:11 +02:00

dh.c

CVE-2023-48795: client side mitigation

2023-12-18 17:35:04 +01:00

ecdh_crypto.c

ecdh_crypto.c: free secret when error happens

2024-03-24 17:27:16 +01:00

ecdh_gcrypt.c

CVE-2023-48795: client side mitigation

2023-12-18 17:35:04 +01:00

ecdh_mbedcrypto.c

CVE-2023-48795: client side mitigation

2023-12-18 17:35:04 +01:00

ecdh.c

CVE-2023-48795: client side mitigation

2023-12-18 17:35:04 +01:00

error.c

SSH_LOG_TRACE: Recategorize loglevels

2022-10-07 09:13:19 +02:00

gcrypt_missing.c

crypto: Add ssh_crypto_free().

2023-08-25 15:13:31 +02:00

getpass.c

Reformat most of the function headers

2022-06-09 09:08:02 +02:00

getrandom_crypto.c

getrandom_crypto.c: Add function to the documentation

2022-09-29 11:12:55 +02:00

getrandom_gcrypt.c

Build external override library with all symbols

2022-07-19 15:21:50 +02:00

getrandom_mbedcrypto.c

Build external override library with all symbols

2022-07-19 15:21:50 +02:00

gssapi.c

feat: add gssapi server callbacks tests

2024-07-11 16:44:20 +02:00

gzip.c

Reformat gzip.c

2023-01-09 22:40:10 +01:00

init.c

Add missing includes for fprintf()

2022-11-23 15:29:29 +01:00

kdf.c

CVE-2023-6918: kdf: Detect context init failures

2023-12-18 17:35:04 +01:00

kex.c

Move ssh_match_group() from misc.c to match.c

2024-06-20 13:46:24 +02:00

known_hosts.c

Remove support for DSA Keys

2023-02-02 14:49:06 +01:00

knownhosts.c

Remove support for DSA Keys

2023-02-02 14:49:06 +01:00

legacy.c

mbedtls: Avoid memory leak when handling ECDSA keys

2024-07-02 15:57:45 +02:00

libcrypto-compat.h

Move old DSA and RSA structs into EVP_PKEY

2022-12-20 10:07:27 +01:00

libcrypto.c

libcrypto: Remove the need for the engine.h

2024-07-08 11:09:42 +02:00

libgcrypt.c

Detect blowfish in mbedtls and skip it if not found

2024-05-16 09:56:38 +02:00

libmbedcrypto.c

Detect blowfish in mbedtls and skip it if not found

2024-05-16 09:56:38 +02:00

libssh.map

Fix #157: Allow to set terminal modes for PTYs

2024-03-06 14:01:36 +01:00

log.c

log: fixes legacy fallback for multiple sessions.

2024-04-29 08:42:26 +02:00

match.c

match.c: Add comment to clarify that endif corresponding to which ifndef

2024-06-20 13:47:47 +02:00

mbedcrypto_missing.c

crypto: Add ssh_crypto_free().

2023-08-25 15:13:31 +02:00

mbedcrypto-compat.h

Fix mbedTLS issues caused by v3 API changes

2022-07-04 08:52:18 +02:00

md_crypto.c

CVE-2023-6918: Systematically check return values when calculating digests

2023-12-18 17:35:04 +01:00

md_gcrypt.c

CVE-2023-6918: Systematically check return values when calculating digests

2023-12-18 17:35:04 +01:00

md_mbedcrypto.c

CVE-2023-6918: Systematically check return values when calculating digests

2023-12-18 17:35:04 +01:00

messages.c

fix: memory leaks in gssapi.c

2024-07-11 16:44:14 +02:00

misc.c

feat: implement proxy jump using libssh

2024-07-11 14:46:13 +02:00

options.c

feat: implement proxy jump using libssh

2024-07-11 14:46:13 +02:00

packet_cb.c

Move ssh_match_group() from misc.c to match.c

2024-06-20 13:46:24 +02:00

packet_crypt.c

packet: Check hmac return codes in ssh_packet_hmac_verify()

2022-07-14 13:09:25 +02:00

packet.c

CVE-2023-48795: client side mitigation

2023-12-18 17:35:04 +01:00

pcap.c

pcap: Reformat

2023-07-11 17:45:31 +02:00

pki_container_openssh.c

pki: New API functions exporting (also ed25519 keys in different formats)

2023-12-15 10:08:35 +01:00

pki_crypto.c

pki: Do not include needless engine header

2024-07-02 18:07:16 +02:00

pki_ed25519_common.c

pki: New API functions exporting (also ed25519 keys in different formats)

2023-12-15 10:08:35 +01:00

pki_ed25519.c

unsorted formatting cleanup

2022-05-10 12:39:26 +02:00

pki_gcrypt.c

libgcrypt: Prevent signature blob to start with 1 bit

2024-04-29 14:33:16 +02:00

pki_mbedcrypto.c

mbedtls: Avoid memory leak when handling ECDSA keys

2024-07-02 15:57:45 +02:00

pki.c

mbedtls: Avoid memory leak when handling ECDSA keys

2024-07-02 15:57:45 +02:00

poll.c

poll: Avoid passing other events to callbacks when called recursively

2023-09-13 14:10:30 +02:00

scp.c

fix: sftp_packet_read stuck in an infinite loop in blocking mode

2024-07-01 13:22:35 +00:00

server.c

CVE-2023-48795: Server side mitigations

2023-12-18 17:35:04 +01:00

session.c

fix: memory leaks in gssapi.c

2024-07-11 16:44:14 +02:00

sftp_aio.c

sftp_aio.c, sftp.h: Add capping to sftp aio write API

2024-01-15 10:47:59 +01:00

sftp_common.c

fix: sftp_packet_read stuck in an infinite loop in blocking mode

2024-07-01 13:22:35 +00:00

sftp.c

sftp: Added lsetstat extension

2024-04-29 08:35:42 +02:00

sftpserver.c

sftpserver: Reuse ssh_{read,write}n

2024-07-18 21:37:12 +02:00

socket.c

socket: Check return value to avoid NULL deref

2024-07-18 21:34:52 +02:00

string.c

Fix multiple spelling and grammar mistakes

2022-05-02 19:05:51 +02:00

threads.c

threads.c: Remove dot from documentation group definition

2022-10-04 10:35:02 +02:00

token.c

CVE-2023-1667:token: Add missing whitespace

2023-05-04 11:51:17 +02:00

ttyopts.c

Conditionalize TTY options that are not available on freebsd

2024-03-08 11:10:16 +01:00

wrapper.c

wrapper: Reformat crypto_new

2023-05-04 11:51:17 +02:00