From 5b49dab01a1624c93ab88a8130538a9f2226a845 Mon Sep 17 00:00:00 2001
From: deuce <>
Date: Wed, 14 Mar 2018 05:37:48 +0000
Subject: [PATCH] Toss invalid session connections into badlogin().

---
 src/sbbs3/main.cpp | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/src/sbbs3/main.cpp b/src/sbbs3/main.cpp
index ed6442ca98..dd9d130077 100644
--- a/src/sbbs3/main.cpp
+++ b/src/sbbs3/main.cpp
@@ -5444,6 +5444,15 @@ NO_SSH:
 							GCESS(i, client_socket, sbbs->ssh_session, "getting channel type");
 							if (tnamelen != 7 || strnicmp(tname, "session", 7)) {
 								lprintf(LOG_INFO, "%04d SSH active channel '%s' is not 'session', disconnecting.", client_socket, tname);
+								identity = get_crypt_attribute(sbbs->ssh_session, CRYPT_SESSINFO_USERNAME);
+								p = get_crypt_attribute(sbbs->ssh_session, CRYPT_SESSINFO_PASSWORD);
+								sbbs->badlogin(identity, p);
+								if (identity != NULL)
+									free_crypt_attrstr(identity);
+								identity = NULL;
+								if (p != NULL)
+									free_crypt_attrstr(p);
+								p = NULL;
 								// Fail because there's no session.
 								ssh_failed = 3;
 							}
-- 
GitLab