1
0
mirror of https://github.com/libssh2/libssh2.git synced 2026-10-24 03:48:58 +03:00
Files
Viktor Szakats 59329f3402 libssh2_userauth_keyboard_interactive_ex.md: fix allocator requirement
Prior to this patch, the documentation stated that the `.text` buffers
filled by the API caller are "free(3)d" by libssh2, referring to the
default system deallocator. In reality however, libssh2 was using
`SSH2_FREE*()` to free these buffers, respecting custom allocators, if
set by the user via `libssh2_session_init_ex()`.

libssh2 behaved this way since the initial implementation committed in
da653774aa 2005-06-11, v0.11

Later, examples were added that use `strdup()` to allocate, which was
(and is) accurate because they do not use a custom allocator:
9a1ce06e31 2007-07-22

Then, when the documentation landed, it incorrectly documented
`free(3)`, perhaps basing it on the examples added earlier:
d4aa801f6f 2008-03-08

I assume that callers overriding the custom allocators are more likely
to have fixed their code to adhere with how libssh2 actually behaved,
rather than believing the documentation and live with an allocator
mismatch for all these years.

Therefore I think this is a documentation error, and this patch
addresses this.

Reported-by: Makise Kurisu
Fixes GHSA-p6p8-66vc-3f24
Reverts ce631aafe1 #2659
Follow-up to d4aa801f6f
Follow-up to da653774aa

Closes #2661
2026-10-07 15:35:05 +02:00
..
2026-05-13 01:10:01 +02:00
2026-04-23 20:14:50 +02:00
2026-04-23 20:14:50 +02:00
2026-06-16 03:47:52 +02:00
2026-06-05 18:12:37 +02:00