summaryrefslogtreecommitdiff
path: root/usr.bin/ssh
AgeCommit message (Collapse)Author
2009-03-23My previous commit didn't fix the problem at all, so stick at my firstTobias Stoeckmann
version of the fix presented to dtucker. Issue notified by Matthias Barkhoff (matthias dot barkhoff at gmx dot de). ok dtucker
2009-03-23Fixed a possible out-of-bounds memory access if the environment variableTobias Stoeckmann
SHELL is shorter than 3 characters. with input by and ok dtucker
2009-03-19for "Ciphers", just point the reader to the keyword in ssh_config(5), justJason McIntyre
as we do for "MACs": this stops us getting out of sync when the lists change; fixes documentation/6102, submitted by Peter J. Philipp alternative fix proposed by djm ok markus
2009-03-17pass correct argv[0] to openlog(); ok djm@Markus Friedl
2009-03-05document what these functions do so I don't ever have to recuse intoDamien Miller
b64_pton/ntop to remember their return values
2009-03-05refactor the (disabled) Schnorr proof code to make it a little moreDamien Miller
generally useful
2009-02-23openssh-5.2Damien Miller
2009-02-22missing periodDamien Miller
2009-02-22don't advertise experimental optionsDamien Miller
2009-02-21Added missing newlines in error messages.Tobias Stoeckmann
ok dtucker
2009-02-18signature should hash over the entire group, not just the generatorDamien Miller
(this is still disabled code)
2009-02-17sync with revised default ciphers; pointed out by dkrause@Damien Miller
2009-02-14mention that eow and no-more-sessions extensions are sent only toDamien Miller
OpenSSH peers
2009-02-13check for enc !=NULL in packet_start_discardMarkus Friedl
2009-02-12kill trailing whitespace;Jason McIntyre
2009-02-12document RemoteForward usage with 0 listen portDamien Miller
2009-02-12consistency: Dq => QlDamien Miller
2009-02-12document -R0:... usageDamien Miller
2009-02-12some paranoia: check that the serialised key is really KEY_RSA beforeDamien Miller
diddling its internals
2009-02-12tighten check for -R0:... forwarding: only allow dynamic allocation ifDamien Miller
want_reply is set in the packet
2009-02-12support remote port forwarding with a zero listen port (-R0:...) toDamien Miller
dyamically allocate a listen port at runtime (this is actually specified in rfc4254); bz#1003 ok markus@
2009-02-02Initialize a few variables to prevent spurious "may be used uninitialized"Darren Tucker
warnings from newer gcc's. ok djm@
2009-01-26Work around the CPNI-957037 Plaintext Recovery Attack by alwaysMarkus Friedl
reading 256K of data on packet size or HMAC errors (in CBC mode only). Help, feedback and ok djm@ Feedback from Martin Albrecht and Paterson Kenny
2009-01-24sync list of preferred ciphers; ok djm@Christian Weisgerber
2009-01-23prefer CTR modes and revised arcfour (i.e w/ discard) modes to CBCDamien Miller
modes; ok markus@
2009-01-22another chunk of a2port() diff that got away. wtfdjm??Damien Miller
2009-01-22make a2port() return -1 when it encounters an invalid port numberDamien Miller
rather than 0, which it will now treat as valid (needed for future work) adjust current consumers of a2port() to check its return value is <= 0, which in turn required some things to be converted from u_short => int make use of int vs. u_short consistent in some other places too feedback & ok markus@
2009-01-22oops! I committed the wrong version of the Channel->path diff,Damien Miller
it was missing some tweaks suggested by stevesk@
2009-01-22make Channel->path an allocated string, saving a few bytes here andDamien Miller
there and fixing bz#1380 in the process; ok markus@
2009-01-151) use obsolete instead of alias for consistencyKevin Steves
2) oUserKnownHostsFile not obsolete but oGlobalKnownHostsFile2 is so move the comment. 3) reorder so like options are together ok djm@
2009-01-14support SOCKS4A protocol, from dwmw2 AT infradead.org via bz#1482;Damien Miller
"looks ok" markus@
2009-01-01fix hash calculation for KEXGEX: hash over the original client-suppliedDamien Miller
values and not the sanity checked versions that we acutally use; bz#1540 reported by john.smith AT arrows.demon.co.uk ok markus@
2009-01-01call channel destroy callbacks on receipt of open failure messages.Damien Miller
fixes client hangs when connecting to a server that has MaxSessions=0 set spotted by imorgan AT nas.nasa.gov; ok markus@
2008-12-30add AllowAgentForwarding to available Match keywords listOkan Demirmen
ok djm
2008-12-29no need to escape single quotes in commentsKevin Steves
2008-12-29fix example, default key type is rsa for 3+ years; fromKevin Steves
frederic.perrin@resel.fr
2008-12-10o cannot be NULL here but use xfree() to be consistent; ok djm@Kevin Steves
2008-12-09fix typo in error messageKevin Steves
2008-12-09update for the synopses displayed by the 'help' command, there are aIgor Sobrado
few missing flags; add 'bye' to the output of 'help'; sorting and spacing. jmc@ suggested replacing .Oo/.Oc with a single .Op macro. ok jmc@
2008-12-09replace by-hand string building with xasprinf(); ok deraadt@Damien Miller
2008-12-09channel_print_adm_permitted_opens() should deal with all the printingKevin Steves
for that config option. suggested by markus@; ok markus@ djm@ dtucker@
2008-12-09correct sftp(1) and corresponding usage syntax;Damien Miller
bz#1518 patch from imorgan AT nas.nasa.gov; ok deraadt@ improved diff jmc@
2008-12-09correct sftp(1) and corresponding usage syntax;Damien Miller
bz#1518 patch from imorgan AT nas.nasa.gov; ok deraadt@ improved diff jmc@
2008-12-09don't leave junk (free'd) pointers around in Forward *fwd argument onDamien Miller
failure; avoids double-free in ~C -L handler when given an invalid forwarding specification; bz#1539 report from adejong AT debian.org via Colin Watson; ok markus@ dtucker@
2008-12-09Deal correctly with failures in remote stat() operation in sftp,Damien Miller
correcting fail-on-error behaviour in batchmode. bz#1541 report and fix from anedvedicky AT gmail.com; ok markus@
2008-12-09The ~C escape handler does not work correctly for multiplexed sessions -Damien Miller
it opens a commandline on the master session, instead of on the slave that requested it. Disable it on slave sessions until such time as it is fixed; bz#1543 report from Adrian Bridgett via Colin Watson ok markus@
2008-12-02s/remote_id/id/ to be more consistent with other code; ok djm@Markus Friedl
2008-12-02backout 1.149, since it's not necessary and openssh clients sendMarkus Friedl
broken CHANNEL_FAILURE/SUCCESS messages since about 2004; ok djm@
2008-12-02we have to use the recipient's channel number (RFC 4254) forMarkus Friedl
SSH2_MSG_CHANNEL_SUCCESS/SSH2_MSG_CHANNEL_FAILURE messages, otherwise we trigger 'Non-public channel' error messages on sshd systems with clientkeepalive enabled; noticed by sturm; ok djm;
2008-11-30Retry sendmsg/recvmsg on EAGAIN and EINTR; ok djm@Darren Tucker