Block a user
Fixed 512-byte stack buffer for SSH user@host can truncate silently
No per-message receive timeout allows slow loris / hang DoS
MAX_DATA_SIZE = 1GB allows large memory allocation from network input
TLS client disables certificate verification when no CA is provided
Missing --timeout / --contimeout CLI flags for connection and I/O timeouts
Missing --quiet / --silent flag to suppress non-error output
strstr(..) path traversal check is weak and has false positives
No connection limit on server creates fork bomb DoS vector
Integer overflow in delta_signature_deserialize allocation
Bug: Missing NULL-checks and weak input validation in CLI argument parsing
Refactor: send_files() and send_files_multithreaded() share massive code duplication
Refactor: config_create() 11-parameter constructor is unmaintainable
Refactor: main() in client_cli.c is a 277-line god function
Merge all 5 batch PRs: security, CLI features, protocol, performance, tests/docs
Merge all 5 batch PRs: security, CLI features, protocol, performance, tests/docs
Merge all 5 batch PRs: security, CLI features, protocol, performance, tests/docs