rustdesk 59fdda3835 file transfer: a send_confirm past the last file no longer panics ...

`set_stream_offset` indexed `self.files` directly. Its only guard is the
`self.file_num() == r.file_num` check in `confirm()`, and `file_num` counts up
past every file, so it equals `files.len()` once the job is done -- read_frame
at :849 treats exactly that value as "job done". A peer that then sends
`send_confirm` with the matching file_num and a non-zero OffsetBlk gets through
the equality check and off the end of the slice.

Every other site indexing `files` in this file already bounds-checks; this was
the one that did not.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01EZ49AbZJYfm8NTp5yDPMab

2026-09-08 11:52:06 +08:00

..

config

add the base crate and repoint the moved modules at it (#16107)

2026-09-08 11:46:42 +08:00

platform

add the base crate and repoint the moved modules at it (#16107)

2026-09-08 11:46:42 +08:00

protos

add the base crate and repoint the moved modules at it (#16107)

2026-09-08 11:46:42 +08:00

fs.rs

file transfer: a send_confirm past the last file no longer panics

2026-09-08 11:52:06 +08:00

keyboard.rs

add the base crate and repoint the moved modules at it (#16107)

2026-09-08 11:46:42 +08:00

lib.rs

add the base crate and repoint the moved modules at it (#16107)

2026-09-08 11:46:42 +08:00