Skip to content

Conversation

@SimonCahill
Copy link

Because the SSH spec doesn't mention any max length of the banner size, it can be assumed that line lengths aren't checked, either. In this case, increasing the max line length (from config) may cause buffer overflows in systems attempting to gain access to servers running this tarpit. Causing buffer overflows in bot systems is a non-issue, and personally I'd encourage it.

If it leads to system instability, fine by me and I'm sure many others will agree.

Allow banner lines up to 4096 chars in length from config
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant