Skip to content

internal: reject '-' in proto ID softwareversion - #1330

Open
ejohnstown wants to merge 1 commit into
wolfSSL:masterfrom
ejohnstown:swver
Open

ejohnstown wants to merge 1 commit into
wolfSSL:masterfrom
ejohnstown:swver

Conversation

@ejohnstown

Copy link
Copy Markdown
Contributor

wolfSSH_CTX_SetSshProtoIdStr() rejects a '-' in softwareversion, which
RFC 4253 Section 4.2 forbids. A '-' in the comments after the first
space is still accepted.

  • ValidateProtoId scans softwareversion for the '-'; ssh.h documents
    the rule and new unit vectors cover both fields.

Issue: F-16082

RFC 4253 Section 4.2 bars the minus sign from softwareversion.
ValidateProtoId now scans the body up to the first space and rejects a
'-' there; the comments after the space may still carry one.

- document the rule on wolfSSH_CTX_SetSshProtoIdStr() in ssh.h
- unit vectors for a dash in softwareversion and in the comments

Issue: F-16082
Copilot AI balanced review requested due to automatic review settings October 19, 2026 23:40

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

@wolfSSL-Fenrir-bot wolfSSL-Fenrir-bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fenrir Automated Review — PR #1330

Scan targets checked: wolfssh-src, wolfssh-bugs
Coverage: 2 of 3 in-scope changed file(s) opened by the reviewer; not opened: wolfssh/ssh.h

Fenrir result: Approved ✅

No new issues found in the changed files.

Advisory only — this automated result does not count as a GitHub approval.

Review tier: Lite

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants