summaryrefslogtreecommitdiff
path: root/usr.bin/ssh
AgeCommit message (Collapse)Author
2005-11-22Correct format/arguments to debug call; spotted by shaw at vranix.com ok djm@Darren Tucker
2005-11-21Perform Kerberos calls even for invalid users to prevent leaking informationDarren Tucker
about account validity. bz #975, patch originally from Senthil Kumar, sanity checked by Simon Wilkinson, tested by djm@, biorn@, ok markus@
2005-11-15Include sys/queue.h explicitly instead of assuming some other headerTodd C. Miller
will pull it in. At the moment it gets pulled in by sys/select.h (which ssh has no business including) via event.h. OK markus@
2005-11-12avoid close(-1), as in rcp; ok cloderTheo de Raadt
2005-11-12spaceTheo de Raadt
2005-11-05Fix leaks in error paths, bz #1109 and #1110 reported by kremenek ATDamien Miller
cs.stanford.edu; ok dtucker@
2005-11-04remove hardcoded hash lengths in key exchange code, allowingDamien Miller
implementation of KEX methods with different hashes (e.g. SHA-256); ok markus@ dtucker@ stevesk@
2005-11-03Cache reverse lookups with and without DNS separately; ok markus@Darren Tucker
2005-10-31grammar;Jason McIntyre
2005-10-31make sure we clean up wtmp, etc. file when we receive a SIGTERM,Damien Miller
SIGINT or SIGQUIT when running without privilege separation (the normal privsep case is already OK). Patch mainly by dtucker@ and senthilkumar_sen AT hotpop.com; ok dtucker@
2005-10-31generate a protocol 2 RSA key by defaultDamien Miller
2005-10-31Fix sorting with "ls -1" command. From Robert Tsai, "looks right" deraadt@Darren Tucker
2005-10-30no need to escape single quotes in comments, no binary changeDamien Miller
2005-10-30remove trailing whitespace;Jason McIntyre
2005-10-30Check for connections with IP options earlier and drop silently. ok djm@Darren Tucker
2005-10-30fix misleading debug message; ok dtucker@Damien Miller
2005-10-30make ssh-keygen discard junk from server before SSH- ident, spotted byDamien Miller
dave AT cirt.net; ok dtucker@
2005-10-30mention control socket fallback behaviour, reported by tryponraj AT gmail.comDamien Miller
2005-10-17more cleanups; ok jakob@Kevin Steves
2005-10-17remove #ifdef LWRES; ok jakob@Kevin Steves
2005-10-17fix memory leaks from 2 sources:Kevin Steves
1) key_fingerprint_raw() 2) malloc in dns_read_rdata() ok jakob@
2005-10-15make external definition static; ok deraadt@Kevin Steves
2005-10-14free()->xfree(); ok djm@Kevin Steves
2005-10-14no trailing "\n" for log functions; ok djm@Kevin Steves
2005-10-13KNF; ok djm@Kevin Steves
2005-10-13unneeded #include, unused declaration, little knf; ok deraadt@Kevin Steves
2005-10-13unused declarations; ok deraadt@Kevin Steves
2005-10-13spelling in commentsKevin Steves
2005-10-13remove unneeded #includes; ok markus@Kevin Steves
2005-10-11bz #1076 set SO_REUSEADDR on X11 forwarding listner sockets, preventingDamien Miller
bind() failure when a previous connection's listeners are in TIME_WAIT, reported by plattner AT inf.ethz.ch; ok dtucker@
2005-10-10fix regression I introduced in 4.2: X11 forwardings initiated afterDamien Miller
a session has exited (e.g. "(sleep 5; xterm) &") would not start. bz #1086 reported by t8m AT centrum.cz; ok markus@ dtucker@
2005-10-07change DSA default back to 1024, as it's defined for 1024 bits onlyMarkus Friedl
and this causes interop problems with other clients. moreover, in order to improve the security of DSA you need to change more components of DSA key generation (e.g. the internal SHA1 hash); ok deraadt
2005-10-03Relocate check_ip_options call to prevent logging of garbage for connectionsDarren Tucker
with IP options set. bz#1092 from David Leonard, "looks good" deraadt@
2005-09-30deploy .An -nosplit; ok jmcJared Yanovich
2005-09-21change label at markus@'s requestDamien Miller
2005-09-21aquire -> acquire, from stevesk@Damien Miller
2005-09-19spelling nit from stevesk@Damien Miller
2005-09-19update -D usage here too;Jason McIntyre
2005-09-19some more .Bk/.Ek to avoid ugly line split;Jason McIntyre
2005-09-19typoDamien Miller
2005-09-19stop connection abort on rekey with delayed compression enabled whenDamien Miller
post-auth privsep is disabled (e.g. when root is logged in); ok dtucker@
2005-09-19mention ability to specify bind_address for DynamicForward and -D options;Damien Miller
bz#1077 spotted by Haruyama Seigo
2005-09-13ensure that stdio fds are attached; ok deraadt@Damien Miller
2005-09-09typo; from mark at mcs.vuw.ac.nz, bug #1082Markus Friedl
2005-09-07enforce chanid != NULL; ok djmMarkus Friedl
2005-08-314.2Markus Friedl
2005-08-30destroy credentials if krb5_kuserok() call fails. Stops credentials beingDamien Miller
delegated to users who are not authorised for GSSAPIAuthentication when GSSAPIDeletegateCredentials=yes and another authentication mechanism succeeds; bz#1073 reported by paul.moore AT centrify.com, fix by simon AT sxw.org.uk, tested todd@ biorn@ jakob@; ok deraadt@
2005-08-08sftp prompt enhancements:Jared Yanovich
- in non-interactive mode, do not print an empty prompt at the end before finishing - print newline after EOF in editline mode - call el_end() in editline mode ok dtucker djm
2005-08-06Unbreak sshd ListenAddress for bare IPv6 addresses.Darren Tucker
Report from Janusz Mucka; ok djm@
2005-07-30listen_hosts initialisation here too; spotted greg AT y2005.nest.cxDamien Miller