BBS:      TELESC.NET.BR
Assunto:  src/sbbs3/ssl.c
De:       Rob Swindell (on Debian Linux)
Data:     Wed, 6 May 2026 19:41:53 -0700
-----------------------------------------------------------
https://gitlab.synchro.net/main/sbbs/-/commit/e3c1569fc5a74ca9bb76c62c
Modified Files:
	src/sbbs3/ssl.c
Log Message:
ssl: assert CRYPTLIB_PATCHES literal is at least 32 chars (CID 483188)

CRYPTLIB_PATCHES is generated at build time by 3rdp/build/hashpatch.pl
as a 32-char MD5 plus "  -" (36 bytes including NUL). If hashpatch.pl
fails to run, the macro can be left empty, and the existing
memcmp(patches, CRYPTLIB_PATCHES, 32) reads 32 bytes off the end of a
1-byte empty literal  Coverity flags this as OVERRUN. Add a
_Static_assert at the top of internal_do_cryptInit() so a malformed
build fails to compile instead of producing a binary that may either
overrun or run a broken patch check.

Co-Authored-By: Claude Opus 4.7 
n
---
  mSynchronetn  hgVertrauen n hHome of Synchronet n gh[vert/cvs/bbs].synchro.net

-----------------------------------------------------------
[Voltar]