1. Forum
  2. DOVE-Net
  3. Synchronet Programming

  • src/syncterm/coverity-cids.txt

    From Deuc¿@VERT to Git commit to main/sbbs/master on Tuesday, August 11, 2026 11:04:02
    https://gitlab.synchro.net/main/sbbs/-/commit/4cd3cb12f87992f03733f979
    Modified Files:
    src/syncterm/coverity-cids.txt
    Log Message:
    syncterm: triage bounded DECRQSS strings (CID 503211)

    Record that the foreground and background truecolor strings originate in the fixed 256-byte sequence buffer and cannot overflow the 3072-byte response buffer.

    Co-Authored-By: OpenAI Codex <noreply@openai.com>

    ---
    þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net
  • From Deuc¿@VERT to Git commit to main/sbbs/master on Tuesday, August 11, 2026 11:04:02
    https://gitlab.synchro.net/main/sbbs/-/commit/7bd4e829a3c253d1365bc459
    Modified Files:
    src/syncterm/coverity-cids.txt
    Log Message:
    syncterm: triage best-effort cache rename (CID 503213)

    Record that cache-directory migration follows the completed persistent BBS rename and intentionally cannot change that operation's result.

    Co-Authored-By: OpenAI Codex <noreply@openai.com>

    ---
    þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net
  • From Deuc¿@VERT to Git commit to main/sbbs/master on Wednesday, August 12, 2026 13:22:31
    https://gitlab.synchro.net/main/sbbs/-/commit/899d2dd149a1d740fc8d4c30
    Modified Files:
    src/syncterm/coverity-cids.txt
    Log Message:
    Coverity: triage builder allocation false positives (CIDs 505444, 505448)

    Successful builder append operations allocate the backing buffer before later appends, so the reported null flows are infeasible.

    Co-Authored-By: OpenAI Codex <noreply@openai.com>

    ---
    þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net
  • From Deuc¿@VERT to Git commit to main/sbbs/master on Thursday, August 13, 2026 10:31:56
    https://gitlab.synchro.net/main/sbbs/-/commit/041dfd2f67eef95c78ca07e8
    Modified Files:
    src/syncterm/coverity-cids.txt
    Log Message:
    Coverity: close SFTP INIT findings (CIDs 106519, 464917)

    Remove CID 106519 after the current scan no longer returns it. Classify CID 464917 as a false positive because the fully buffered packet is capped at 256 KiB and every extension iteration consumes two bounds-checked strings or stops.

    Co-Authored-By: OpenAI Codex <noreply@openai.com>

    ---
    þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net