summaryrefslogtreecommitdiff
path: root/usr.bin/ssh
AgeCommit message (Collapse)Author
2006-05-28build a lint library for us to use aboveTheo de Raadt
2006-05-18paramter -> parameterMiod Vallat
2006-05-17fix leak; coverity via Kylene Jo HallMarkus Friedl
2006-05-16missing free; from Kylene HallMarkus Friedl
2006-05-08uint32_t -> u_int32_t (which we use everywhere else)Damien Miller
2006-05-06Add $OpenBSD$ in comment here tooDarren Tucker
2006-05-04tighter DH exponent checks here too; feedback and ok markus@Damien Miller
2006-04-30these files should not exist. the developers have been given ample timeTheo de Raadt
and warnings to integrate this into the manual page proper, but users who find documentation missing keep being pointed at these files in the src tree. we now delete the files, so that they will document these things in the correct place. you know who you are, and btw, jmc will help you integrate the information into the man page if you just wrote simple bits of text and asked nicely..
2006-04-25Prevent ssh from trying to open private keys with bad permissions more thanDarren Tucker
once or prompting for their passphrases (which it subsequently ignores anyway), similar to a previous change in ssh-add. bz #1186, ok djm@
2006-04-22remove extra spacesKevin Steves
2006-04-22use setres[ug]id() to permanently revoke privileges; ok deraadt@Damien Miller
2006-04-20Switch from using pipes to socketpairs for communication betweenDamien Miller
sftp/scp and ssh, and between sshd and its subprocesses. This saves a file descriptor per session and apparently makes userland ppp over ssh work; ok markus@ deraadt@
2006-04-20simplify; ok djm@Markus Friedl
2006-04-20replace the last non-sig_atomic_t flag used in a signal handler with aDamien Miller
sig_atomic_t, unfortunately with some knock-on effects in other (non- signal) contexts in which it is used; ok markus@
2006-04-18Move Buffer bignum functions into their own file, bufbn.c. This means thatDarren Tucker
sftp and sftp-server (which use the Buffer functions in bufaux.c but not the bignum ones) no longer need to be linked with libcrypto. ok markus@
2006-04-16reorder sanity test so that it cannot dereference past the end of theDamien Miller
iov array; well spotted canacar@!
2006-04-16avoid making a tiny 4-byte write to send the packet length of sftpDamien Miller
commands, which would result in a separate tiny packet on the wire by using atomiciov(writev, ...) to write the length and the command in one pass; ok deraadt@
2006-04-16introduce atomiciov() function that wraps readv/writev to retryDamien Miller
interrupted transfers like atomicio() does for read/write; feedback deraadt@ dtucker@ stevesk@ ok deraadt@
2006-04-16Fix condition where we could exit with a fatal error when an inputDamien Miller
buffer became too large and the remote end had advertised a big window. The problem was a mismatch in the backoff math between the channels code and the buffer code, so make a buffer_check_alloc() function that the channels code can use to propsectivly check whether an incremental allocation will succeed. bz #1131, debugged with the assistance of cove AT wildpackets.com; ok dtucker@ deraadt@
2006-04-03GSSAPI buffers shouldn't be nul-terminated, spotted in bugzilla #1066Damien Miller
by dleonard AT vintela.com. use xasprintf() to simplify code while in there; "looks right" deraadt@
2006-04-02sessionid can be 32 bytes now too when sha256 kex is used; ok djm@Darren Tucker
2006-04-01ANSIfy; requested deraadt@Damien Miller
2006-04-01xasprintification; ok deraadt@Damien Miller
2006-04-01minimal lint cleanup (unused crud, and some size_t); ok djmTheo de Raadt
2006-04-01$OpenBSD$ in here tooDamien Miller
2006-03-31remote user escape is %r not %h; spotted by jmc@Damien Miller
2006-03-31kill trailing whitespace;Jason McIntyre
2006-03-30Prevent duplicate log messages when privsep=yes; ok djm@Darren Tucker
2006-03-30Correctly handle truncated files while converting keys; ok djm@Darren Tucker
2006-03-30add percent escape chars to the IdentityFile option, bz #1159 basedDamien Miller
on a patch by imaging AT math.ualberta.ca; feedback and ok dtucker@
2006-03-30replace {GET,PUT}_XXBIT macros with functionally similar functions,Damien Miller
silencing a heap of lint warnings. also allows them to use __bounded__ checking which can't be applied to macros; requested by and feedback from deraadt@
2006-03-30ARGSUSED for dispatch table-driven functionsDamien Miller
2006-03-28use strtonum() to parse the pid from the file, and range check itTheo de Raadt
better; ok djm
2006-03-28do not accept unreasonable X ports numbers; ok djmTheo de Raadt
2006-03-28spacingTheo de Raadt
2006-03-27always use a format string for addargs; spotted by mouring@Damien Miller
2006-03-27use strtonum() instead of atoi(), limit dhg size to 64k; ok djmTheo de Raadt
2006-03-27we can do the size & nmemb check before the integer overflow check; evolTheo de Raadt
2006-03-26typoTheo de Raadt
2006-03-25standardise spacing in $OpenBSD$ tags; requested by deraadt@Damien Miller
2006-03-25delete cast not requiredTheo de Raadt
2006-03-25remove (char *) casts to a function that accepts void * for the argTheo de Raadt
2006-03-25use strtonum() instead of atoi() [limit X screens to 400, sorry]Theo de Raadt
2006-03-25mark two more signal handlers ARGSUSEDTheo de Raadt
2006-03-25cast strtonum() result to right typeTheo de Raadt
2006-03-25nicer size_t and time_t typesTheo de Raadt
2006-03-25spacingTheo de Raadt
2006-03-25needed casts (always will be needed)Theo de Raadt
2006-03-25Put $OpenBSD$ tags back (as comments) to replace the RCSID()s thatDamien Miller
Theo nuked - our scripts to sync -portable need them in the files
2006-03-25"abormally" is a perfectly cromulent word, but "abnormally" is betterDamien Miller