Given that it's a small SSH server, I wonder how feasible it would be to rewrite it in a memory-safe language. C doesn't feel like the most security-conscious (and, quite frankly, legible) language in this day and age.