• src/sbbs3/ftpsrvr.cpp jsdoor.cpp main.cpp src/xpdev/multisock.c

    From Rob Swindell (on Debian Linux)@VERT to Git commit to main/sbbs/master on Tue May 5 15:55:25 2026
    https://gitlab.synchro.net/main/sbbs/-/commit/a05b3f8c6c7f8d126dd3d1db
    Modified Files:
    src/sbbs3/ftpsrvr.cpp jsdoor.cpp main.cpp src/xpdev/multisock.c
    Log Message:
    Silence Coverity sockaddr-union OVERRUN false positives (CID 645971)

    Cast union xp_sockaddr* directly to struct sockaddr* at accept(), getsockname(), and similar call sites instead of taking the address of
    the union's struct sockaddr member. The pointer value is identical
    (union members all share offset 0), but the static type now reflects
    the full union storage, so Coverity no longer mistakes the destination
    for a 16-byte sockaddr buffer being filled with up to 128 bytes.

    Affects ftpsrvr.cpp:1338,1360 (CID 645971), and the same pattern in
    jsdoor.cpp accept_socket(), main.cpp accept_socket(), and
    xpms_accept() in xpdev/multisock.c.

    ---
    þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net