summaryrefslogtreecommitdiff
path: root/usr.bin/ssh
AgeCommit message (Collapse)Author
2009-06-22alphabetize includes; reduces diff vs portable and style(9). ok stevesk djmDarren Tucker
2009-06-21Add tags for the benefit of the sync scriptsDarren Tucker
2009-06-21abort if key_sign fails, preventing possible null deref. Based on reportDarren Tucker
from Paolo Ganci, ok markus@ djm@
2009-06-13Use debug3() instead of debug(), requested by markus@Andreas Gunnarsson
ok dtucker@
2009-06-12Move some more statics into session_stateAndreas Gunnarsson
ok markus@ djm@
2009-06-12Fix warnings.Andreas Gunnarsson
ok markus@ djm@
2009-06-12Fix warnings found by chl@ and djm@ and change roaming_atomicio'sAndreas Gunnarsson
return type to match atomicio's Diff from djm@, ok markus@
2009-05-28Keep track of number of bytes read and written. Needed for upcomingAndreas Gunnarsson
changes. Most code from Martin Forssen, maf at appgate dot com. ok markus@
2009-05-27Un-static ssh_exchange_identification(), part of a larger change fromAndreas Gunnarsson
Martin Forssen and needed for upcoming changes. ok markus@
2009-05-27Add packet_put_int64() and packet_get_int64(), part of a larger changeAndreas Gunnarsson
from Martin Forssen. ok markus@
2009-05-27Move the KEX_COOKIE_LEN define to kex.hAndreas Gunnarsson
ok markus@
2009-05-27Send SSH2_MSG_DISCONNECT when the client disconnects. From a largerAndreas Gunnarsson
change from Martin Forssen, maf at appgate dot com. ok markus@
2009-05-27Add clear_cached_addr(), needed for upcoming changes allowing the peerAndreas Gunnarsson
address to change. ok markus@
2009-05-25Put the globals in packet.c into a struct and don't access it directlyAndreas Gunnarsson
from other files. No functional changes. ok markus@ djm@
2009-04-21clarify we cd to user's home after chroot; ok markus@ onKevin Steves
earlier version; tweaks and ok jmc@
2009-04-18tweak previous; ok steveskJason McIntyre
2009-04-17clarify that even internal-sftp needs /dev/log for logging to work; okKevin Steves
markus@
2009-04-17use INTERNAL_SFTP_NAME for setproctitle() of in-process sftp-server;Kevin Steves
ok djm@ markus@
2009-04-14Fixed a few the-the misspellings in comments. Skipped a bunch in ↵Janne Johansson
binutils,gcc and so on. ok jmc@
2009-04-14remove unused option character from getopt() optstring; ok markus@Kevin Steves
2009-04-13fix possessive; ok djm@Kevin Steves
2009-03-26fix a few typographical errors found by spell(1).Igor Sobrado
ok dtucker@, jmc@
2009-03-23My previous commit didn't fix the problem at all, so stick at my firstTobias Stoeckmann
version of the fix presented to dtucker. Issue notified by Matthias Barkhoff (matthias dot barkhoff at gmx dot de). ok dtucker
2009-03-23Fixed a possible out-of-bounds memory access if the environment variableTobias Stoeckmann
SHELL is shorter than 3 characters. with input by and ok dtucker
2009-03-19for "Ciphers", just point the reader to the keyword in ssh_config(5), justJason McIntyre
as we do for "MACs": this stops us getting out of sync when the lists change; fixes documentation/6102, submitted by Peter J. Philipp alternative fix proposed by djm ok markus
2009-03-17pass correct argv[0] to openlog(); ok djm@Markus Friedl
2009-03-05document what these functions do so I don't ever have to recuse intoDamien Miller
b64_pton/ntop to remember their return values
2009-03-05refactor the (disabled) Schnorr proof code to make it a little moreDamien Miller
generally useful
2009-02-23openssh-5.2Damien Miller
2009-02-22missing periodDamien Miller
2009-02-22don't advertise experimental optionsDamien Miller
2009-02-21Added missing newlines in error messages.Tobias Stoeckmann
ok dtucker
2009-02-18signature should hash over the entire group, not just the generatorDamien Miller
(this is still disabled code)
2009-02-17sync with revised default ciphers; pointed out by dkrause@Damien Miller
2009-02-14mention that eow and no-more-sessions extensions are sent only toDamien Miller
OpenSSH peers
2009-02-13check for enc !=NULL in packet_start_discardMarkus Friedl
2009-02-12kill trailing whitespace;Jason McIntyre
2009-02-12document RemoteForward usage with 0 listen portDamien Miller
2009-02-12consistency: Dq => QlDamien Miller
2009-02-12document -R0:... usageDamien Miller
2009-02-12some paranoia: check that the serialised key is really KEY_RSA beforeDamien Miller
diddling its internals
2009-02-12tighten check for -R0:... forwarding: only allow dynamic allocation ifDamien Miller
want_reply is set in the packet
2009-02-12support remote port forwarding with a zero listen port (-R0:...) toDamien Miller
dyamically allocate a listen port at runtime (this is actually specified in rfc4254); bz#1003 ok markus@
2009-02-02Initialize a few variables to prevent spurious "may be used uninitialized"Darren Tucker
warnings from newer gcc's. ok djm@
2009-01-26Work around the CPNI-957037 Plaintext Recovery Attack by alwaysMarkus Friedl
reading 256K of data on packet size or HMAC errors (in CBC mode only). Help, feedback and ok djm@ Feedback from Martin Albrecht and Paterson Kenny
2009-01-24sync list of preferred ciphers; ok djm@Christian Weisgerber
2009-01-23prefer CTR modes and revised arcfour (i.e w/ discard) modes to CBCDamien Miller
modes; ok markus@
2009-01-22another chunk of a2port() diff that got away. wtfdjm??Damien Miller
2009-01-22make a2port() return -1 when it encounters an invalid port numberDamien Miller
rather than 0, which it will now treat as valid (needed for future work) adjust current consumers of a2port() to check its return value is <= 0, which in turn required some things to be converted from u_short => int make use of int vs. u_short consistent in some other places too feedback & ok markus@
2009-01-22oops! I committed the wrong version of the Channel->path diff,Damien Miller
it was missing some tweaks suggested by stevesk@
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-26 18:09:19 +0000