sean/zelnet
Watch
1
0
Fork
You've already forked zelnet
 0
Code Issues Pull requests Projects Releases 61 Packages Wiki Activity

fix(telnet): accept full reads and bound negotiation replies #120

Merged
binjovi-bot merged 2 commits from codex/nvt-rfc-boundaries into trunk 2026-09-13 20:49:57 +00:00
Conversation 0 Commits 2 Files changed 10 +207 -65
sean commented 2026-09-13 20:41:04 +00:00
Owner
Copy link

A valid 16 KiB Telnet read exceeded the old pending buffer. A valid 40-character terminal name could overrun the reply buffer. The client now accepts complete reads, bounds incomplete subnegotiation, validates terminal names and reply capacity, and sends suboption replies only after negotiation enables the option.

Validation: 1,087 offline tests pass after rebase onto released v0.10.15. The exact revision passes all nine native pub400 System Request checks, including Save, Restore, Cancel Invite, and execution of retained input. The transfer evidence suite is also run before release. Documentation records RFC and pinned implementation comparisons, the v0.10.15 release, and explicit limits. No ACS parity claim or TN3270E support is added.

A valid 16 KiB Telnet read exceeded the old pending buffer. A valid 40-character terminal name could overrun the reply buffer. The client now accepts complete reads, bounds incomplete subnegotiation, validates terminal names and reply capacity, and sends suboption replies only after negotiation enables the option. Validation: 1,087 offline tests pass after rebase onto released v0.10.15. The exact revision passes all nine native pub400 System Request checks, including Save, Restore, Cancel Invite, and execution of retained input. The transfer evidence suite is also run before release. Documentation records RFC and pinned implementation comparisons, the v0.10.15 release, and explicit limits. No ACS parity claim or TN3270E support is added.
docs: record Save Restore release and Telnet audit limits
All checks were successful
binjovi/ci Binjovi completed the frozen plan
Details
2df5b33939
binjovi-bot deleted branch codex/nvt-rfc-boundaries 2026-09-13 20:49:57 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
sean/zelnet!120
No description provided.