https://gitlab.synchro.net/main/sbbs/-/commit/0ecf245c77cb0092594e98bf
Modified Files:
src/sbbs3/scfglib1.c
Log Message:
Clamp the security level lines per message value between 1 and 65535
If a user's security level lines per message was set to '0', bad things would happen to the heap if the user posted/sent a message. '1' is a reasonable minimum value. If you don't want a user/group of users to send/post messages, there are restrictions for achieving that. Also this setting is (currently,
at least) 16-bit, so clamp it there too on the high end.
Also clamp the expire-to security level setting between 0 and 99, while we're here and noticed that this value wasn't being sanitized either.
---
■ Synchronet ■ Vertrauen ■ Home of Synchronet ■ [vert/cvs/bbs].synchro.net