https://gitlab.synchro.net/main/sbbs/-/commit/188acf9672d51a40425c7bad  
  Modified Files:  
   src/ssh/ssh-auth.c ssh-trans.c ssh-trans.h src/ssh/test/CMakeLists.txt  
  test_transport_errors.c  
  Log Message:  
  auth: cleanse password packet before releasing TX lock (CID 505204)  
    
  Password authentication serialized secrets into the session's shared TX  
  buffer, then cleansed that buffer only after send_commit released tx_mtx.  
  Another sender could acquire the mutex and reuse the buffer before the  
  cleanse, allowing the old cleanup to corrupt its packet.  
    
  Add a sensitive commit path that scrubs the bounded payload while tx_mtx is  
  still held and before any termination callback. Cover direct, gathered,  
  failure, and oversized-payload paths with focused tests.  
    
  Co-Authored-By: OpenAI Codex   
  --- SBBSecho 3.37-Linux  
   * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)