mirror of
https://github.com/m1ngsama/TNT.git
synced 2026-02-08 00:54:03 +00:00
- Replace all strcpy() calls with strncpy() to prevent buffer overflows - Add buffer overflow checking in client_printf() vsnprintf result - Implement UTF-8 sequence validation to prevent malformed input - Add utf8_is_valid_sequence() function with complete validation - Enhance read_username() with UTF-8 boundary checks - Add UTF-8 validation for message input handling These changes address: - Buffer overflow vulnerabilities (lines 178, 423, 510) - Insufficient vsnprintf() error checking (line 106) - Missing UTF-8 sequence validation (lines 156-171) Fixes prevent: - Buffer overflow attacks - Overlong UTF-8 encoding exploits - Invalid UTF-8 surrogates injection |
||
|---|---|---|
| .. | ||
| .gitkeep | ||
| chat_room.h | ||
| common.h | ||
| message.h | ||
| ssh_server.h | ||
| tui.h | ||
| utf8.h | ||