From 8c161c6d7f238de6b4714ba7df96fe038407a527 Mon Sep 17 00:00:00 2001
From: nnposter <nnposter@e0a8ed71-7df4-0310-8962-fdc924857419>
Date: Sat, 22 Aug 2026 22:15:41 +0000
Subject: [PATCH] Tolerate trailing data in the rsync version response. Close
 #3440

---
 CHANGELOG        | 3 +++
 nselib/rsync.lua | 2 +-
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG b/CHANGELOG
index caf258626..46d6a6629 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -1,5 +1,8 @@
 #Nmap Changelog ($Id$); -*-text-*-
 
+o [NSE][GH#3440] The rsync library was not correctly parsing server responses
+  for protocol version 32. [h00die]
+
 o [NSE][GH#3430] Nmap now tolerates TLS targets that do not send close_notify.
   [nnposter]
 
diff --git a/nselib/rsync.lua b/nselib/rsync.lua
index f477524d1..6347bd8c0 100644
--- a/nselib/rsync.lua
+++ b/nselib/rsync.lua
@@ -62,7 +62,7 @@ Helper = {
     if ( not(status) ) then
       return false, data
     end
-    if ( not(data:match("^@RSYNCD: [%.%d]+$")) ) then
+    if ( not(data:match("^@RSYNCD: [.%d]+%f[ \0]")) ) then
       return false, "Protocol error"
     end
     return true