summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/deattack.c
AgeCommit message (Collapse)Author
2006-09-16limit maximum work performed by the CRC compensation attack detector,Damien Miller
problem reported by Tavis Ormandy, Google Security Team; ok markus@ deraadt@
2006-08-03almost entirely get rid of the culture of ".h files that include .h files"Theo de Raadt
ok djm, sort of ok stevesk makes the pain stop in one easy step
2006-07-22move #include <string.h> out of includes.hKevin Steves
2006-03-30replace {GET,PUT}_XXBIT macros with functionally similar functions,Damien Miller
silencing a heap of lint warnings. also allows them to use __bounded__ checking which can't be applied to macros; requested by and feedback from deraadt@
2006-03-25Put $OpenBSD$ tags back (as comments) to replace the RCSID()s thatDamien Miller
Theo nuked - our scripts to sync -portable need them in the files
2006-03-25change OpenSSH's xrealloc() function from being xrealloc(p, new_size) toDamien Miller
xrealloc(p, new_nmemb, new_itemsize). realloc is particularly prone to integer overflows because it is almost always allocating "n * size" bytes, so this is a far safer API; ok deraadt@
2006-03-25introduce xcalloc() and xasprintf() failure-checked allocations functionsDamien Miller
and use them throughout openssh xcalloc is particularly important because malloc(nmemb * size) is a dangerous idiom (subject to integer overflow) and it is time for it to die feedback and ok deraadt@
2006-03-22remove IV support from the CRC attack detector, OpenSSH has never usedDamien Miller
it - it only applied to IDEA-CFB, which we don't support. prompted by NetBSD Coverity report via elad AT netbsd.org; feedback markus@ "nuke it" deraadt@
2006-03-20spacingTheo de Raadt
2006-03-19RCSID() can dieTheo de Raadt
2006-02-07duplicate #includeKevin Steves
2003-09-18more buffer allocation fixes; from Solar Designer; CAN-2003-0682; ok millert@Markus Friedl
2002-03-04$OpenBSD$ and RCSID() cleanup: don't use RCSID() in .h files; addKevin Steves
missing RCSID() to .c files and remove dup /*$OpenBSD$*/ from .c files. ok markus@
2001-12-19basic KNF done while i was looking for something elseTheo de Raadt
2001-12-05make it compile with more strict prototype checkingJun-ichiro itojun Hagino
2001-11-19kill more registersMike Pechkin
millert@ ok
2001-06-23more strict prototypes. raise warning level in Makefile.inc. markus ok'edJun-ichiro itojun Hagino
TODO; cleanup headers
2001-03-01KNFTheo de Raadt
2001-01-21split ssh.h and try to cleanup the #include mess. remove unnecessary #includes.Markus Friedl
rename util.[ch] -> misc.[ch]
2000-12-19replace 'unsigned bla' with 'u_bla' everywhere. also, replace 'char unsigned'Markus Friedl
with u_char.
2000-10-31so that large packets do not wrap "n"; from netbsdMarkus Friedl
2000-09-07cleanup copyright notices on all files. I have attempted to be accurate withTheo de Raadt
the details. everything is now under Tatu's licence (which I copied from his readme), and/or the core-sdi bsd-ish thing for deattack, or various openbsd developers under a 2-term bsd licence. We're not changing any rules, just being accurate.
2000-08-19rename crc32() to ssh_crc32() to avoid zlib name clash. do not move toTheo de Raadt
libz crc32 function yet, because it has ugly "long"'s in it; oneill@cs.sfu.ca
2000-06-20OpenBSD tagMarkus Friedl
1999-11-24much more KNFTheo de Raadt
1999-11-23KNF part 1Markus Friedl
1999-11-02replace assert() with error, fatal or packet_disconnectMarkus Friedl
1999-10-05move auth-sockets to private dirMarkus Friedl
delete minfd residua
1999-10-05include licensing infoDug Song
1999-10-05crc32 compensation attack fix from CORE-SDI. "it's not crypto..." -- deraadt@Dug Song