summaryrefslogtreecommitdiff
path: root/usr.bin/ssh
AgeCommit message (Collapse)Author
2007-01-22fix detection of whether we should show progress meter or not: scpDamien Miller
tested isatty(stderr) but wrote the progress meter to stdout. This patch makes it test stdout. bz#1265 reported by junkmail AT bitsculpture.com; of dtucker@
2007-01-22return error from do_upload() when a write fails. fixes bz#1252: zeroDamien Miller
exit status from sftp when uploading to a full device. report from jirkat AT atlas.cz; ok dtucker@
2007-01-21spacesKevin Steves
2007-01-21spacesKevin Steves
2007-01-17Honour activep for times (eg ServerAliveInterval) while parsingDarren Tucker
ssh_config and ~/.ssh/config so they work properly with Host directives. From mario.lorenz@wincor-nixdorf.com via bz #1275. ok markus@
2007-01-12more secsh -> rfc 4716 updates;Jason McIntyre
spotted by wiz@netbsd ok markus
2007-01-10do not use a list for SYNOPSIS;Jason McIntyre
this is actually part of a larger report sent by eric s. raymond and forwarded by brad, but i only read half of it. spotted by brad.
2007-01-03spacesKevin Steves
2007-01-03ARGSUSED for lintKevin Steves
2007-01-03spacesKevin Steves
2007-01-03remove small dead code; arnaud.lacombe.1@ulaval.ca via Coverity scanKevin Steves
2007-01-02do not use lists for SYNOPSIS;Jason McIntyre
from eric s. raymond via brad
2006-12-14Make "PermitOpen all" first-match within a block to match the way otherDarren Tucker
options work. ok markus@ djm@
2006-12-13Make PermitOpen work with multiple values like the man pages says. bz #1267Darren Tucker
with details from peter at dmtz.com, with & ok djm@
2006-12-12bz #1019: some ssh.com versions apparently can't cope with the remote portDamien Miller
forwarding bind_address being a hostname, so send them an address for cases where they are not explicitly specified (wildcard or localhost bind). reported by daveroth AT acm.org; ok dtucker@ deraadt@
2006-12-11add rfc 4716 (public key format); ok jmcMarkus Friedl
2006-11-23Don't access buf[strlen(buf) - 1] for zero-length strings.Ray Lai
``ok by me'' djm@.
2006-11-14use argc and argv not some made up short formTheo de Raadt
2006-11-07BN_hex2bn returns int; from dtucker@Markus Friedl
2006-11-07correctly check for bad signatures in the monitor, otherwise the monitor andMarkus Friedl
the unpriv process can get out of sync. with dtucker@, ok djm@, dtucker@
2006-11-06add missing checks for openssl return codes; with & ok djm@Markus Friedl
2006-10-31check DH_compute_key() for -1 even if it should not happen because ofMarkus Friedl
earlier calls to dh_pub_is_valid(); report krahmer at suse.de; ok djm
2006-10-28correct/expand example of usage of -w; ok jmc@ stevesk@Otto Moerbeek
2006-10-22cancel progress meter when upload write fails; ok deraadt@Damien Miller
2006-10-11exit instead of doing a blocking tcp send if we detect a client/server timeout,Markus Friedl
since the tcp sendqueue might be already full (of alive requests); ok dtucker, report mpf
2006-10-10sleep before retrying (not after) since sleep changes errno; fixesMarkus Friedl
pr 5250; rad@twig.com; ok dtucker djm
2006-10-09xmalloc -> xcalloc that was missed previously, from portableDamien Miller
2006-10-06sys/resource.h needs sys/time.h; prompted by brad@Damien Miller
2006-09-30Clear errno before calling the strtol functions.Ray Lai
From Paul Stoeber <x0001 at x dot de1 dot cc>. OK deraadt@.
2006-09-25Change "a SSH" to "an SSH". Hurray, I'm not the only one whoRay Lai
pronounces "SSH" as "ess-ess-aich". OK jmc@ and stevesk@.
2006-09-19client NULL deref on protocol error; Tavis Ormandy, Google Security TeamMarkus Friedl
2006-09-19Use S_IS* macros insted of masking with S_IF* flags. The latter mayOtto Moerbeek
have multiple bits set, which lead to surprising results. Spotted by Paul Stoeber, more to come. ok millert@ pedro@ jaredy@ djm@
2006-09-16limit maximum work performed by the CRC compensation attack detector,Damien Miller
problem reported by Tavis Ormandy, Google Security Team; ok markus@ deraadt@
2006-08-30crank to 4.4Damien Miller
2006-08-30Fix regression where SSH2 banner is printed at loglevels ERROR and FATALDarren Tucker
where previously it weren't. bz #1221, found by Dean Kopesky, ok djm@
2006-08-29Work around a problem in Heimdal that occurs when KRB5CCNAME file isDarren Tucker
missing, by checking whether or not kerberos allocated us a context before attempting to free it. Patch from Simon Wilkinson, tested by biorn@, ok djm@
2006-08-29normalise some inconsistent (but harmless) NULL pointer checksDamien Miller
spotted by the Stanford SATURN tool, via Isil Dillig; ok markus@ deraadt@
2006-08-21Add more detail about what permissions are and aren't accepted forDarren Tucker
authorized_keys files. Corrections jmc@, ok djm@, "looks good" jmc@
2006-08-21Document HostbasedUsesNameFromPacketOnly. Corrections from jmc@, ok jmc@ djm@Darren Tucker
2006-08-18GSSAPI error code should be 0 and not -1; from simon@sxw.org.ukDamien Miller
2006-08-18constify host argument to match the rest of the GSSAPI functions andDamien Miller
unbreak compilation with -Werror
2006-08-18bz #1218 - disable SPNEGO as per RFC4462; diff from simon AT sxw.org.ukDamien Miller
ok markus@
2006-08-18reorder so prototypes are sorted by the files they refer to; noDamien Miller
binary change
2006-08-18delay authentication related cleanups until we're authenticated andMarkus Friedl
all alarms have been cancelled; ok deraadt
2006-08-18make signal handler termination path shorter; risky code pointed out byTheo de Raadt
mark dowd; ok djm markus
2006-08-16factor inetd connection, TCP listen and main TCP accept loop out of main()Damien Miller
into separate functions to improve readability; ok markus@
2006-08-14Add ability to match groups to Match keyword in sshd_config. Feedback djm@,Darren Tucker
stevesk@, ok stevesk@.
2006-08-12Revert previous include file ordering change, for ssh to compile under gcc2Miod Vallat
(or until openssl include files are cleaned of parameter names in function prototypes)
2006-08-06"zlib.h" can be <zlib.h>; ok djm@ markus@Kevin Steves
2006-08-05Typo in commentDarren Tucker