Martin Pitt 006ddd5035 CVE-2026-59843 tests: Verify zero max packet size in channel open is rejected ...

Cover both directions with unit tests: a client receiving
SSH2_MSG_CHANNEL_OPEN_CONFIRMATION with a maximum packet size of 0 must
not transition the channel to the open state, and a server receiving
SSH2_MSG_CHANNEL_OPEN with a maximum packet size of 0 must reject the
request. Both come with a positive control using a valid packet size.

Signed-off-by: Martin Pitt <mpitt@debian.org>
Reviewed-by: Jakub Jelen <jjelen@redhat.com>
Merge-Request: <https://gitlab.com/libssh/libssh-mirror/-/merge_requests/863>
(cherry picked from commit 7d7c3a04a2)

Reviewed-by: Pavol Žáčik <pzacik@redhat.com>

2026-07-28 13:40:56 +02:00

..

CMakeLists.txt

CVE-2026-0968 tests: Reproducer for invalid longname data

2026-02-05 17:19:01 +01:00

hello world.sh

Fix shellcheck issues

2024-03-22 12:35:07 +01:00

torture_bignum.c

bignum: Make sure the padding is large enough for the number

2025-01-21 11:32:49 +01:00

torture_bind_config.c

Add RequiredRsaSize configuration option

2025-10-01 16:06:43 +02:00

torture_buffer.c

test(buffer): add unit tests for ssh_buffer_dup function

2025-09-25 15:04:18 +02:00

torture_bytearray.c

tests: Avoid warnings about unused arguments

2018-11-23 17:30:16 +01:00

torture_callbacks.c

Use calloc instead of zeroizing structure after malloc

2025-08-06 11:16:58 +02:00

torture_channel.c

CVE-2026-59843 tests: Verify zero max packet size in channel open is rejected

2026-07-28 13:40:56 +02:00

torture_config_match_localnetwork.c

tests: add support for IPv4/IPv6 loopback network ID fallback in torture_config_match_localnetwork.c

2024-08-02 11:19:05 +02:00

torture_config.c

tests: cover config-vs-app-set option precedence

2026-07-23 17:36:54 +02:00

torture_crypto.c

tests: Skip chacha20-poly1305 tests in FIPS mode

2020-01-23 09:48:11 +01:00

torture_forwarded_tcpip_callback.c

tests:unittests: Fix tests on FreeBSD

2025-04-24 10:47:26 +02:00

torture_hashes.c

session: Refactor ssh_get_publickey_hash

2026-01-05 12:24:13 +01:00

torture_init.c

init: Introduce internal is_ssh_initialized()

2020-04-09 11:25:49 +02:00

torture_isipaddr.c

torture: Remove unused variable

2018-06-28 09:05:58 +02:00

torture_keyfiles.c

Remove support for DSA Keys

2023-02-02 14:49:06 +01:00

torture_knownhosts_parsing.c

Reproducer for memory leak from parsing knonw hosts

2026-02-03 18:01:36 +01:00

torture_list.c

tests: Added NULL checks in torture_list.c

2019-01-26 13:56:22 +01:00

torture_misc.c

CVE-2026-0966 tests: Test coverage for ssh_get_hexa

2026-02-05 22:31:48 +01:00

torture_moduli.c

tests: Use fseek instead of rewind to simplify error checking

2025-04-16 17:41:22 +02:00

torture_options.c

kex: Allow MLKEM key exchanges in FIPS mode

2026-07-09 17:46:04 +02:00

torture_packet_filter.c

Fix various spelling issues reported by codespell

2022-10-12 13:50:38 +02:00

torture_packet.c

torture_packet: Improve checking of ssh_packet_socket_callback() return value

2026-07-09 17:50:41 +02:00

torture_pki_dsa.c

Remove support for DSA Keys

2023-02-02 14:49:06 +01:00

torture_pki_ecdsa_uri.c

tests: Provide minimal openssl configuration file

2026-01-15 12:22:10 +01:00

torture_pki_ecdsa.c

tests: Improve test coverage of comparing certificates

2026-01-05 12:21:43 +01:00

torture_pki_ed25519_uri.c

tests: Provide minimal openssl configuration file

2026-01-15 12:22:10 +01:00

torture_pki_ed25519.c

tests: Improve test coverage of comparing certificates

2026-01-05 12:21:43 +01:00

torture_pki_rsa_uri.c

tests: Provide minimal openssl configuration file

2026-01-15 12:22:10 +01:00

torture_pki_rsa.c

tests: Improve test coverage of comparing certificates

2026-01-05 12:21:43 +01:00

torture_pki_sk_ecdsa.c

tests(pki): add torture tests for security keys

2025-08-01 15:28:58 +05:30

torture_pki_sk_ed25519.c

tests(pki): add torture tests for security keys

2025-08-01 15:28:58 +05:30

torture_pki_sk.c

tests(pki): add torture tests for pki_sk functions

2025-11-13 15:27:48 +05:30

torture_pki_sshsig.c

feat(pki): extend the sshsig API to support security keys along with tests

2025-11-13 15:28:14 +05:30

torture_pki.c

Remove support for DSA Keys

2023-02-02 14:49:06 +01:00

torture_push_pop_dir.c

tests: Introduce functions to change directories

2018-11-28 15:51:06 +01:00

torture_rand.c

crytpo: Make sure we check return of ssh_get_random() correctly

2018-07-05 12:12:14 +02:00

torture_server_direct_tcpip.c

tests:unittests: Fix tests on FreeBSD

2025-04-24 10:47:26 +02:00

torture_server_x11.c

tests:unittests: Fix tests on FreeBSD

2025-04-24 10:47:26 +02:00

torture_session_keys.c

tests: Fix variable names to avoid codespell issues

2025-03-04 16:00:33 +01:00

torture_sk_usbhid.c

tests(fido2): add tests for the usb-hid security key callbacks

2025-11-13 15:11:46 +05:30

torture_string.c

tests(string): add tests for ssh_string_from_data function

2025-10-10 14:00:22 +02:00

torture_temp_dir.c

tests: Introduce torture_make_temp_dir()

2018-11-28 15:51:06 +01:00

torture_temp_file.c

tests: use torture_create_temp_file() in torture_knownhosts_parsing

2018-11-28 15:51:06 +01:00

torture_threads_buffer.c

tests: Make the static ananlyzers happy with the threads

2025-04-16 17:41:22 +02:00

torture_threads_crypto.c

tests: Init cipher structure in thread_crypto_aes256_cbc()

2018-10-24 09:48:35 +02:00

torture_threads_init.c

tests: Use UNUSED macros in torture_threads_init

2018-11-30 18:25:12 +01:00

torture_threads_pki_rsa.c

tests: Avoid needless pthread_exit()

2025-11-05 17:52:24 +01:00

torture_tokens.c

torture_tokens.c: Add tests for new token functions

2022-11-18 20:28:29 +01:00

torture_unit_server.c

feat: Handle hostkeys like OpenSSH

2024-03-19 10:26:44 +01:00

torture_unit_sftp.c

CVE-2026-0968 tests: Reproducer for invalid longname data

2026-02-05 17:19:01 +01:00