summaryrefslogtreecommitdiff
path: root/usr.bin
AgeCommit message (Collapse)Author
2018-04-01With malloc option J, the first realloc(3) in apply(1) would returnAlexander Bluhm
memory that is filled with junk only. Allocate the empty string with malloc(3) and initialize it explicitly with the NUL terminator. OK tb@ tobias@
2018-04-01update currency exchange rates;Jason McIntyre
2018-03-31Improve description of openssl(1) ciphers.Ingo Schwarze
* Remove -tls1 option which has no effect. * For -V, sort the fields in the order they are printed, and do not talk about key size restrictions, nothing like that is printed.
2018-03-30Updates to the description of "openssl ca" from OpenSSL.Ingo Schwarze
Some options were missing, some were in the wrong section (CRL-related or not), and there were some minor errors, typos, and omissions.
2018-03-30checked the content against the current version of OpenSSL openssl.pod;Ingo Schwarze
resulting fixes: markup of "command" below SYNOPSIS and links to the config file formats below SEE ALSO
2018-03-30Fix overflow in list value parsing.Tobias Stoeckmann
On 64 bit systems an integer overflow between strtol and int casting could occur, resulting in out of boundary writes. Using strtonum fixes this issue and leads to better error messages. ok schwarze
2018-03-29Do not crash on empty window, reported by Jamie Macdonald in GitHubNicholas Marriott
issue 1299. Patch from Thomas Adam.
2018-03-27Clear password buffers in non-terminating casesTheo de Raadt
ok tobias
2018-03-27Fix possibly wrong execution of commands and out of boundary write withTobias Stoeckmann
unusual input. Correction and regression tests based on FreeBSD bin/95079. While at it, fix another segmentation fault when using ' ' as magic character and also disallow '\0' as magic character. This cannot make any sense and avoids a theoretical out of boundary read. ok tb@
2018-03-24openssh-7.7Markus Friedl
2018-03-24fix bogus warning when signing cert keys using agent; from djm; ok deraadt ↵Markus Friedl
dtucker
2018-03-23Fix a regression: do not warn about no client in rename-window.Nicholas Marriott
2018-03-23Fix size calculation when spreading out panes.Nicholas Marriott
2018-03-22organizationUnitName -> organizationalUnitName;Jason McIntyre
from matt schwartz
2018-03-22ssh/xmss: fix build; ok djm@Markus Friedl
2018-03-22ssh/xmss: fix deserialize for certs; ok djm@Markus Friedl
2018-03-19Remove the tls_init() call, since it is no longer necessary.Joel Sing
ok bcook@ beck@ inoguchi@
2018-03-17Fix negative window index range check (> not <). Reported by Juan PabloNicholas Marriott
in GitHub issue 1283.
2018-03-17Split only LESS on $.Kenneth R Westerback
As guenther@ said "STOP SPLITTING ANYTHING BUT $LESS ON '$' !". anton@ came up with the same diff. ok nicm@
2018-03-17Fix use after free that caused the creation of a spurious file.Kenneth R Westerback
As guenther@ said "fix whatever led to the \337 x 16 crap". anton@ came up with the same diff. ok nicm@
2018-03-16Ouch, fix previous: In the edge case of a single-character stringIngo Schwarze
containing nothing but a single hyphen, the pointer got incremented twice at one point, causing a read overrun found by naddy@.
2018-03-16improve markup quality in the cases found by the new "--" style messageIngo Schwarze
2018-03-16Insert full size panes at the right position, from KOIE Hidetaka inNicholas Marriott
GitHub issue 1284.
2018-03-16Style message about bad input encoding of em-dashes as -- instead of \(em.Ingo Schwarze
Suggested by Thomas Klausner <wiz at NetBSD>; discussed with jmc@.
2018-03-14sort expiry-time;Jason McIntyre
2018-03-14rename recently-added "valid-before" key restriction to "expiry-time"Damien Miller
as the former is confusing wrt similar terminology in X.509; pointed out by jsing@
2018-03-13remove the Ic macro from EXAMPLES, and use a much more standard literal;Jason McIntyre
while there, kill some Tn
2018-03-12add valid-before="[time]" authorized_keys option. A simple way ofDamien Miller
giving a key an expiry date. ok markus@
2018-03-08Add a missing client-detached hook when the server shuts down, and doNicholas Marriott
not exit until jobs started from run-shell/if-shell have finished (add a job flags member and a flag to indicate other jobs). GitHub issue 1245.
2018-03-07revert recent strdelim() change, it causes problems with some configs.Damien Miller
revision 1.124 date: 2018/03/02 03:02:11; author: djm; state: Exp; lines: +19 -8; commitid: nNRsCijZiGG6SUTT; Allow escaped quotes \" and \' in ssh_config and sshd_config quotes option strings. bz#1596 ok markus@
2018-03-05Stricter checking for skip1 and skip2.cheloha
As we do elsewhere in the tree, make sure we (a) got a number at all, (b) that it doesn't have non-digits dangling off the end, (c) that it's positive, and (d) that it didn't overflow. ok tb@
2018-03-05Add fatal() and fatalx() and put them to use.cheloha
... but don't use them for pledge errors or usage errors. They are convenience wrappers that check if sflag is set before logging an error. They always exit with status 2. We were not honoring sflag in special.c at all. Now we do. ok tb@
2018-03-05For some reason tmux treats SGR 10 as SGR 0. It has done since the firstNicholas Marriott
version and I'm not sure why since no other terminal appears to. Change to just ignore SGR 10 instead.
2018-03-05Fix failure when AS number is < 10denis
Thanks to Pierre Emeriaud for reporting & testing. OK benno@
2018-03-05move the input format details to -f;Jason McIntyre
remove the output format details and point to sshd(8), where it is documented; ok dtucker
2018-03-03Update RSA minimum modulus size to 1024. sshkey.h rev 1.18 bumpedDarren Tucker
the minimum from 768 to 1024, update man page accordingly.
2018-03-03switch over to the new authorized_keys options API and remove theDamien Miller
legacy one. Includes a fairly big refactor of auth2-pubkey.c to retain less state between key file lines. feedback and ok markus@
2018-03-03Introduce a new API for handling authorized_keys options. This APIDamien Miller
parses options to a dedicated structure rather than the old API's approach of setting global state. It also includes support for merging options, e.g. from authorized_keys, authorized_principals and/or certificates. feedback and ok markus@
2018-03-03warn when the agent returns a signature type that was different toDamien Miller
what was requested. This might happen when an old/non-OpenSSH agent is asked to make a rsa-sha2-256/512 signature but only supports ssh-rsa. bz#2799 feedback and ok markus@
2018-03-02apply a lick of paint; tweaks/ok dtuckerJason McIntyre
2018-03-02Allow escaped quotes \" and \' in ssh_config and sshd_config quotesDamien Miller
option strings. bz#1596 ok markus@
2018-03-02refactor sshkey_read() to make it a little more, err, readable.Damien Miller
ok markus
2018-03-01consistently spell "IPsec"; from raf czlonkaJason McIntyre
note that this is only part of raf's original diff: the rest is for code. although i'm sure the diff itself is correct, i don;t judge myself qualified to decide whether those changes are warranted. still, i'd appreciate at least a reply to raf's diff from another developer (yay! nay!)
2018-03-01missing #ifdef for _PATH_HOST_XMSS_KEY_FILE; report by jmc@Markus Friedl
2018-03-01Expand formats in window and session names.Nicholas Marriott
2018-03-01update currency exchange rates;Jason McIntyre
2018-02-28ca start/enddates require all 4 yyyy from 2050 on; first twoJason McIntyre
are otherwise optional diff from holger mikolon, tweaked a bit by me
2018-02-28move to 6.3-betaTheo de Raadt
2018-02-28Add -Z flag to choose-tree, choose-client, choose-buffer toNicholas Marriott
automatically zoom the pane when the mode is entered and unzoom when it exits, assuming the pane is not already zoomed. Add -Z to the default key bindings.
2018-02-27Stop mentionning/testing the for the ASU bit (S flag).Martin Pieuchot
It is of no use since suser() no longer set this bit. ok millert@, bluhm@