• src/sbbs3/scfglib1.c

    From Rob Swindell@VERT to Git commit to main/sbbs/master on Mon Jan 9 15:52:32 2023
    https://gitlab.synchro.net/main/sbbs/-/commit/a9a4f2280007c74f62e79bc8
    Modified Files:
    src/sbbs3/scfglib1.c
    Log Message:
    Change the default MQTT protocol version from 5.0 to 3.1.1

    I read that 3.1.1 is much more widely supported, but perhaps that was old
    info.

    ---
    ■ Synchronet ■ Vertrauen ■ Home of Synchronet ■ [vert/cvs/bbs].synchro.net
  • From Rob Swindell (in GitKraken)@VERT to Git commit to main/sbbs/master on Mon Mar 20 17:37:59 2023
    https://gitlab.synchro.net/main/sbbs/-/commit/aa89e19333de108d30a41fca
    Modified Files:
    src/sbbs3/scfglib1.c
    Log Message:
    Address MSVC warning: conversion from 'double' to 'unsigned int'

    ... possible loss of data (yeah, yeah, we know)

    ---
    ■ Synchronet ■ Vertrauen ■ Home of Synchronet ■ [vert/cvs/bbs].synchro.net
  • From Rob Swindell (on Windows)@VERT to Git commit to main/sbbs/master on Thu Apr 13 18:45:54 2023
    https://gitlab.synchro.net/main/sbbs/-/commit/0ecf245c77cb0092594e98bf
    Modified Files:
    src/sbbs3/scfglib1.c
    Log Message:
    Clamp the security level lines per message value between 1 and 65535

    If a user's security level lines per message was set to '0', bad things would happen to the heap if the user posted/sent a message. '1' is a reasonable minimum value. If you don't want a user/group of users to send/post messages, there are restrictions for achieving that. Also this setting is (currently,
    at least) 16-bit, so clamp it there too on the high end.

    Also clamp the expire-to security level setting between 0 and 99, while we're here and noticed that this value wasn't being sanitized either.

    ---
    ■ Synchronet ■ Vertrauen ■ Home of Synchronet ■ [vert/cvs/bbs].synchro.net