WIP

ejohnstown · ejohnstown · commit 281c9c8376f8 · 2025-08-04T15:13:29.000-07:00
diff --git a/src/internal.c b/src/internal.c
@@ -710,7 +710,8 @@ INLINE static int IsMessageAllowedClient(WOLFSSH *ssh, byte msg)
     }
 
     /* Is client userauth complete? */
-    if (ssh->connectState < CONNECT_SERVER_USERAUTH_ACCEPT_DONE) {
+    if (ssh->connectState >= CONNECT_KEYED
+            && ssh->connectState < CONNECT_SERVER_USERAUTH_ACCEPT_DONE) {
         /* The endpoints should not allow message IDs greater than or
          * equal to msgid 80 before user authentication is complete.
          * Per RFC 4252 section 6. */

Original file line number	Diff line number	Diff line change
`@@ -710,7 +710,8 @@ INLINE static int IsMessageAllowedClient(WOLFSSH *ssh, byte msg)`
`710`	`710`	`}`
`711`	`711`
`712`	`712`	`/* Is client userauth complete? */`
`713`		`- if (ssh->connectState < CONNECT_SERVER_USERAUTH_ACCEPT_DONE) {`
	`713`	`+ if (ssh->connectState >= CONNECT_KEYED`
	`714`	`+ && ssh->connectState < CONNECT_SERVER_USERAUTH_ACCEPT_DONE) {`
`714`	`715`	`/* The endpoints should not allow message IDs greater than or`
`715`	`716`	`* equal to msgid 80 before user authentication is complete.`
`716`	`717`	`* Per RFC 4252 section 6. */`