shinys000114/libssh
1
0
Fork 0
mirror of https://git.libssh.org/projects/libssh.git synced 2026-03-24 20:40:09 +09:00
Code Issues Packages Projects Releases Wiki Activity
Files
bc24bba176ec2db3ba859c1eb254126331f0bf41
libssh/src
History
Colin Baumgarten 3154a4ab8d sftpserver: Fix client messages being ignored if sent at a high rate 
When using OpenSSH scp to read files larger than a few hundred
kilobytes, downloads stall and never finish. A workaround is to
pass -Xnrequests=1 to scp, which will cause scp to only do a
single concurrent SFTP read request at a time.

The cause for the problem is that if SFTP client messages are
received at a high rate, sftp_channel_default_data_callback() will
potentially be called with multiple messages in the incoming data
buffer, but only the first message will be extracted and handled.

So add a loop to extract as many SFTP client messages as available
from the incoming data buffer.

Signed-off-by: Colin Baumgarten <colin.baumgarten@hubersuhner.com>
Reviewed-by: Jakub Jelen <jjelen@redhat.com>
2026-03-17 12:01:15 +01:00
..
ABI
libssh-0.12.0
2026-02-10 10:35:23 +01:00
external
mlkem: Use fprintf instead of internal logging function
2026-02-02 19:32:16 +01:00
threads
mbedtls: Warn about missing featues of mbedTLS build
2025-09-30 13:16:34 +02:00
agent.c
agent: Add support for SSH2_AGENTC_REMOVE_IDENTITY
2026-03-09 18:27:10 +01:00
auth.c
docs: add doxygen documentation and fix inconsistencies
2026-03-13 20:48:07 +01:00
base64.c
CVE-2025-4877 base64: Prevent integer overflow and potential OOB
2025-06-23 13:33:10 +02:00
bignum.c
bignum: Make sure the padding is large enough for the number
2025-01-21 11:32:49 +01:00
bind_config.c
docs: add doxygen documentation and fix inconsistencies
2026-03-13 20:48:07 +01:00
bind.c
docs: add doxygen documentation and fix inconsistencies
2026-03-13 20:48:07 +01:00
buffer.c
doc: add missing Doxygen comments and fix documentation style
2026-03-17 11:46:11 +01:00
callbacks.c
fix(callbacks): make is_callback_valid's behaviour consistent with its name
2025-07-24 16:10:54 +02:00
chachapoly.c
CVE-2025-4878 Initialize pointers where possible
2025-06-23 15:24:30 +02:00
channels.c
channels: Fix OOM error check after strdup
2026-02-20 10:55:17 +01:00
client.c
Implement originalhost/host separation and Match support
2026-03-13 20:46:35 +01:00
CMakeLists.txt
Native ML-KEM768 implementation
2026-01-15 12:48:06 +01:00
config_parser.c
Add strict validation mode to ssh_config_parse_uri in config_parser
2026-03-13 20:46:35 +01:00
config.c
doc: add missing Doxygen comments and fix documentation style
2026-03-17 11:46:11 +01:00
connect.c
connect: Avoid calling close with negative argument
2026-01-07 14:46:07 +01:00
connector.c
fix typos
2026-02-10 10:35:23 +01:00
crypto_common.c
crypto: Use stdint types and make code more readable of secure_memcmp()
2022-06-20 09:18:59 +02:00
curve25519_crypto.c
CVE-2025-8277: Fix memory leak of unused ephemeral key pair after client's wrong KEX guess
2025-08-14 10:32:05 +02:00
curve25519_fallback.c
refactor(curve25519): split the single file curve25519.c into multiple files for better readability
2025-05-06 22:03:18 +02:00
curve25519_gcrypt.c
CVE-2025-8277: Fix memory leak of unused ephemeral key pair after client's wrong KEX guess
2025-08-14 10:32:05 +02:00
curve25519_mbedcrypto.c
refactor(curve25519): split the single file curve25519.c into multiple files for better readability
2025-05-06 22:03:18 +02:00
curve25519.c
curve25519: Make ssh_curve25519_build_k public
2026-01-05 12:24:13 +01:00
dh_crypto.c
feat: add gssapi key exchange
2026-01-05 12:24:00 +01:00
dh_key.c
feat: add gssapi key exchange
2026-01-05 12:24:00 +01:00
dh-gex.c
CVE-2026-0965 config: Do not attempt to read non-regular and too large configuration files
2026-02-05 22:31:48 +01:00
dh.c
reformat: gssapi key exchange
2026-01-05 12:24:13 +01:00
ecdh_crypto.c
Native ML-KEM768 implementation
2026-01-15 12:48:06 +01:00
ecdh_gcrypt.c
Native ML-KEM768 implementation
2026-01-15 12:48:06 +01:00
ecdh_mbedcrypto.c
Native ML-KEM768 implementation
2026-01-15 12:48:06 +01:00
ecdh.c
CVE-2023-48795: client side mitigation
2023-12-18 17:35:04 +01:00
error.c
doc: add missing Doxygen comments and fix documentation style
2026-03-17 11:46:11 +01:00
gcrypt_missing.c
CVE-2025-4878 Initialize pointers where possible
2025-06-23 15:24:30 +02:00
getpass.c
use standard O_NONBLOCK naming
2025-12-12 18:18:02 +01:00
getrandom_crypto.c
getrandom_crypto.c: Add function to the documentation
2022-09-29 11:12:55 +02:00
getrandom_gcrypt.c
Build external override library with all symbols
2022-07-19 15:21:50 +02:00
getrandom_mbedcrypto.c
Build external override library with all symbols
2022-07-19 15:21:50 +02:00
gssapi.c
gss-kex: Fix memory leaks in ssh_gssapi_check_client_config
2026-02-24 10:30:53 +01:00
gzip.c
zlib: Move conditional compilation inside of the gzip.c
2025-01-14 14:47:44 +01:00
hybrid_mlkem.c
Add casts to a couple more pack size constants in hybrid_mlkem.c
2026-03-06 15:02:37 +01:00
init.c
Add missing includes for fprintf()
2022-11-23 15:29:29 +01:00
kdf.c
CVE-2023-6918: kdf: Detect context init failures
2023-12-18 17:35:04 +01:00
kex-gss.c
gss-kex: Release output_token and mic on error paths
2026-02-24 10:30:53 +01:00
kex.c
sntrup: Remove needless conversion of shared secret to bignum
2026-03-06 15:02:37 +01:00
known_hosts.c
CVE-2026-0965 config: Do not attempt to read non-regular and too large configuration files
2026-02-05 22:31:48 +01:00
knownhosts.c
knownhosts: Avoid possible memory leak on failed malloc
2026-03-16 18:44:55 +01:00
legacy.c
doc: add missing Doxygen comments and fix documentation style
2026-03-17 11:46:11 +01:00
libcrypto-compat.h
Move old DSA and RSA structs into EVP_PKEY
2022-12-20 10:07:27 +01:00
libcrypto.c
crypto: Add support for Poly1305 from LibreSSL
2026-02-02 18:37:54 +01:00
libgcrypt.c
Replace explicit_bzero with ssh_burn
2025-12-12 18:03:19 +01:00
libmbedcrypto.c
Replace explicit_bzero with ssh_burn
2025-12-12 18:03:19 +01:00
libssh.map
feat(server): Add support for -o option argument in server example
2026-02-24 10:36:58 +01:00
log.c
doc: add missing Doxygen comments and fix documentation style
2026-03-17 11:46:11 +01:00
match.c
CVE-2026-0967 match: Avoid recursive matching (ReDoS)
2026-02-05 17:19:01 +01:00
mbedcrypto_missing.c
crypto: Add ssh_crypto_free().
2023-08-25 15:13:31 +02:00
mbedcrypto-compat.h
refactor(curve25519): split the single file curve25519.c into multiple files for better readability
2025-05-06 22:03:18 +02:00
md_crypto.c
md: Implement one-shot md5
2026-01-05 12:24:13 +01:00
md_gcrypt.c
md: Implement one-shot md5
2026-01-05 12:24:13 +01:00
md_mbedcrypto.c
md: Implement one-shot md5
2026-01-05 12:24:13 +01:00
messages.c
Add Keyboard Interactive
2026-01-06 22:56:44 +05:30
misc.c
doc: add missing Doxygen comments and fix documentation style
2026-03-17 11:46:11 +01:00
mlkem_crypto.c
kex: Implement remaining hybrid ML-KEM methods
2025-11-25 17:57:42 +01:00
mlkem_gcrypt.c
Add missing check in ML-KEM implementation of gcrypt
2026-01-15 12:23:42 +01:00
mlkem_native.c
Native ML-KEM768 implementation
2026-01-15 12:48:06 +01:00
mlkem.c
Native ML-KEM768 implementation
2026-01-15 12:48:06 +01:00
options.c
doc: add missing Doxygen comments and fix documentation style
2026-03-17 11:46:11 +01:00
packet_cb.c
packet_cb: adjust response to NEWKEYS w.r.t. GSSAPI
2026-01-05 12:24:13 +01:00
packet_crypt.c
Replace explicit_bzero with ssh_burn
2025-12-12 18:03:19 +01:00
packet.c
packet: complete GSSAPI packet filter
2026-01-05 12:24:13 +01:00
pcap.c
Use calloc instead of zeroizing structure after malloc
2025-08-06 11:16:58 +02:00
pki_container_openssh.c
Replace explicit_bzero with ssh_burn
2025-12-12 18:03:19 +01:00
pki_context.c
pki_context: Document 0 is valid for bit size (default)
2026-03-16 19:04:57 +01:00
pki_crypto.c
Replace explicit_bzero with ssh_burn
2025-12-12 18:03:19 +01:00
pki_ed25519_common.c
CVE-2025-4878 Initialize pointers where possible
2025-06-23 15:24:30 +02:00
pki_ed25519.c
ed25519: Avoid timing leak when comparing private keys
2026-02-05 17:19:01 +01:00
pki_gcrypt.c
pki: Avoild false positive matches when comparing certificates in mbedtls and gcrypt
2026-01-05 12:21:43 +01:00
pki_mbedcrypto.c
pki: Avoild false positive matches when comparing certificates in mbedtls and gcrypt
2026-01-05 12:21:43 +01:00
pki_sk.c
Replace explicit_bzero with ssh_burn
2025-12-12 18:03:19 +01:00
pki.c
pki: Discourage comparing private keys
2026-02-05 17:19:01 +01:00
poll.c
doc: add missing Doxygen comments and fix documentation style
2026-03-17 11:46:11 +01:00
scp.c
CVE-2026-0964 scp: Reject invalid paths received through scp
2026-02-05 22:31:48 +01:00
server.c
gssapi: enable gssapi-keyex in FIPS mode
2026-01-05 12:24:13 +01:00
session.c
doc: add missing Doxygen comments and fix documentation style
2026-03-17 11:46:11 +01:00
sftp_aio.c
sftp: Avoid dead code and possible overruns
2025-01-13 15:47:43 +01:00
sftp_common.c
CVE-2026-0968: sftp: Sanitize input handling in sftp_parse_longname()
2026-02-05 17:19:01 +01:00
sftp.c
sftp: Fix out-of-bound read from sftp extensions
2026-02-05 17:19:00 +01:00
sftpserver.c
sftpserver: Fix client messages being ignored if sent at a high rate
2026-03-17 12:01:15 +01:00
sk_common.c
Replace explicit_bzero with ssh_burn
2025-12-12 18:03:19 +01:00
sk_usbhid.c
fido2: implement the default sk_callbacks for FIDO2/U2F keys using the usb-hid protocol
2025-11-09 05:52:45 +05:30
sntrup761.c
sntrup: Remove needless conversion of shared secret to bignum
2026-03-06 15:02:37 +01:00
socket.c
doc: add missing Doxygen comments and fix documentation style
2026-03-17 11:46:11 +01:00
string.c
Replace explicit_bzero with ssh_burn
2025-12-12 18:03:19 +01:00
threads.c
doc: add missing Doxygen comments and fix documentation style
2026-03-17 11:46:11 +01:00
token.c
Replace explicit_bzero with ssh_burn
2025-12-12 18:03:19 +01:00
ttyopts.c
ttyopts: make non-POSIX defines optional
2025-11-04 14:46:58 +01:00
wrapper.c
Native ML-KEM768 implementation
2026-01-15 12:48:06 +01:00