summaryrefslogtreecommitdiff
path: root/usr.bin/ssh
AgeCommit message (Collapse)Author
2007-11-03avoid errno trashing in signal handler; ok dtuckerTheo de Raadt
2007-11-03Use xstrdup/xfree when saving pwname and pwdir; ok deraadt@Darren Tucker
2007-11-03bz #1377: getpwuid results were being clobbered by another getpw* callTheo de Raadt
inside tilde_expand_filename(); save the data we need carefully ok djm
2007-11-03fix memory leak in process_cmdline(), patch from Jan.Pechanec AT Sun.COM;Damien Miller
ok dtucker@
2007-10-29clean up after previous macro removal;Jason McIntyre
2007-10-29Make LocalCommand work for Protocol 1 too; ok djm@Darren Tucker
2007-10-29ProxyCommand and LocalCommand use the user's shell, not /bin/sh; ok djm@Darren Tucker
2007-10-29Send config block back to slave for invalid users too so optionsDarren Tucker
set by a Match block (eg Banner) behave the same for non-existent users. Found by and ok djm@
2007-10-29Plug tiny mem leaks in ControlPath and ProxyCommand option processing; ok djm@Darren Tucker
2007-10-29Allow build without -DGSSAPI; ok deraadt@Darren Tucker
2007-10-24factor out network read/write into an atomicio()-like function, and use itDamien Miller
to handle short reads, apply bandwidth limits and update counters. make network IO non-blocking, so a small trickle of reads/writes has a chance of updating the progress meter; bz #799 ok dtucker@
2007-10-24rework argument splitting and parsing to cope correctly with common shellDamien Miller
escapes and make handling of escaped characters consistent with sh(1) and between sftp commands (especially between ones that glob their arguments and ones that don't). parse command flags using getopt(3) rather than hand-rolled parsers. ok dtucker@
2007-10-22make sure that both the local and remote port are correct whenMarkus Friedl
parsing -L; Jan Pechanec (bz #1378)
2007-10-02handles zero-sized strings that fgets can returnCharles Longeau
properly removes trailing newline removes an unused variable correctly counts line number "looks ok" ray@ markus@
2007-09-29Remove unused prototype. ok djm@Darren Tucker
2007-09-27Don't return -1 on error in dh_pub_is_valid(), since it evaluatesRay Lai
to true. Also fix a typo. Initial diff from Matthew Dempsky, input from djm. OK djm, markus.
2007-09-25When adding a key that already exists, update the propertiesCan Erkin Acar
(time, confirm, comment) instead of discarding them. ok djm@ markus@
2007-09-21unifdef -DBSD_AUTHDamien Miller
unifdef -USKEY These options have been in use for some years; ok markus@ "no objection" millert@
2007-09-21document KbdInteractiveAuthentication in ssh_config.5;Damien Miller
patch from dkg AT fifthhorseman.net
2007-09-16use off_t instead of u_int64_t for file offsets, matching what theDamien Miller
progressmeter code expects; bz #842
2007-09-13fix incorrect test when setting syslog facility; from Jan PechanecDamien Miller
2007-09-12use xmalloc() and xfree(); ok markus@ pvalchev@Kevin Steves
2007-09-11remove #if defined block not needed; ok markus@ dtucker@Kevin Steves
2007-09-11use strcspn to properly overwrite '\n' in fgets returned bufferGilles Chehade
ok pyr@, ray@, millert@, moritz@, chl@
2007-09-11sort #includeKevin Steves
2007-09-09sort synopsis and options in ssh-agent(1); usage is lowercaseIgor Sobrado
ok jmc@
2007-09-04make ssh(1)'s ConnectTimeout option apply to both the TCP connection andDamien Miller
SSH banner exchange (previously it just covered the TCP connection). This allows callers of ssh(1) to better detect and deal with stuck servers that accept a TCP connection but don't progress the protocol, and also makes ConnectTimeout useful for connections via a ProxyCommand; feedback and "looks ok" markus@
2007-09-04make file descriptor passing code return an error rather than call fatal()Damien Miller
when it encounters problems, and use this to make session multiplexing masters survive slaves failing to pass all stdio FDs; ok markus@
2007-08-23Execute ProxyCommands with $SHELL rather than /bin/sh unconditionallyDamien Miller
2007-08-23Support "Banner=none" to disable displaying of the pre-login banner;Damien Miller
ok dtucker@ deraadt@
2007-08-23login_cap.h doesn't belong hereDamien Miller
2007-08-23missed include bits from last commitDamien Miller
2007-08-23unifdef HAVE_LOGIN_CAP; ok deraadt@ millert@Damien Miller
2007-08-15tun device forwarding now honours ExitOnForwardFailure; ok markus@Kevin Steves
2007-08-15openssh 4.7Markus Friedl
2007-08-15do NOT fall back to the trused x11 cookie if generation of an untrustedMarkus Friedl
cookie fails; from security-alert at sun.com; ok dtucker
2007-08-07bz#1232: ensure that any specified LocalCommand is executed after theDamien Miller
tunnel device is opened. Also, make failures to open a tunnel device fatal when ExitOnForwardFailure is active. Reported by h.goebel AT goebel-consult.de; ok dtucker markus reyk deraadt
2007-08-06the ellipsis is not an optional argument; while here, sync the usageIgor Sobrado
and synopsis of commands lots of good ideas by jmc@ ok jmc@
2007-07-12Delint: remove some unreachable statements, from Bret Lambert.Ray Lai
OK markus@ and dtucker@.
2007-06-25Include <poll.h> like the man page says rather than <sys/poll.h>. ok djm@Darren Tucker
2007-06-25Correct test for window updates every three packets; prevents sendingDarren Tucker
window updates for every single packet. ok markus@
2007-06-19if the fd passed to atomicio/atomiciov() is non blocking, then poll() toDamien Miller
avoid a spin if it is not yet ready for reading/writing; ok dtucker@
2007-06-14when waiting for the multiplex exit status, read until the master endDamien Miller
writes an entire int of data *and* closes the client_fd; fixes mux regression spotted by dtucker, ok dtucker@
2007-06-14handle EINTR when waiting for mux exit status properlyDamien Miller
2007-06-13don't ftruncate() non-regular files; bz#1236 reported by wood AT xmission.com;Damien Miller
ok dtucker@
2007-06-12Encode filename with strnvis if the name contains a newline (which can'tDarren Tucker
be represented in the scp protocol), from bz #891. ok markus@
2007-06-12add -K to SYNOPSIS;Jason McIntyre
2007-06-12identies -> identities;Jason McIntyre
2007-06-12Pass GSS OID to gss_display_status to provide better information inDarren Tucker
error messages. Patch from Simon Wilkinson via bz 1220. ok djm@
2007-06-12improved exit message from multiplex slave sessions; bz #1262Damien Miller
reported by alexandre.nunes AT gmail.com; ok dtucker@