Age | Commit message (Collapse) | Author | |
---|---|---|---|
2024-10-21 | Bump up the maximum for repeat-time (some people want it to be | Nicholas Marriott | |
effectively infinite). | |||
2024-10-21 | Add function to get current offset from copy mode, from Michael Grant. | Nicholas Marriott | |
2024-10-21 | Adjust how Ctrl and Meta keys are sent to use standard representation if | Nicholas Marriott | |
available in mode 1, from Stanislav Kljuhhin, GitHub issue 4188. | |||
2024-10-18 | mention that LocalForward and RemoteForward can accept Unix domain socket | Damien Miller | |
paths; GHPR115 | |||
2024-10-18 | remove duplicate check; GHPR392 from Pedro Martelletto | Damien Miller | |
2024-10-18 | allow "-" as output file for moduli screening | Damien Miller | |
based on GHPR393 | |||
2024-10-18 | ssh-keyscan doesn't need it's own sshfatal() definition, it can | Damien Miller | |
use the shared one from fatal.c based on GHPR401 from lengyijun | |||
2024-10-18 | in _ssh_order_hostkeyalgs() consider ECDSA curve type when arranging | Damien Miller | |
the hostkey algorithms. AFAIK this code is unused in OpenSSH, but I guess others are using it based on GHPR387 from Pawel Jakub Dawidek | |||
2024-10-18 | require control-escape character sequences passed via the '-e ^x' | Damien Miller | |
commandline to be exactly two characters long. Avoids one by OOB read if ssh is invoked as "ssh -e^ ..." Spotted by Maciej Domanski in GHPR368 | |||
2024-10-18 | remove addr.[ch] functions that are unused and visbility-restrict | Damien Miller | |
ones that are unused outside the implementation itself; based on GHPR#282 by tobias@ | |||
2024-10-18 | unreachable POLLERR case; from ya0guang via GHPR485 | Damien Miller | |
2024-10-18 | s/Sx/Cm/ for external references; from Domen Puncer Kugler via GHPR501 | Damien Miller | |
2024-10-17 | Switch pane-colors and cursor-style options to be in alphabetical order, | Nicholas Marriott | |
from Teubel Gyorgy, GitHub issue 4191. | |||
2024-10-17 | Allow attributes in menu style, from Japin Li in GitHub issue 4194. | Nicholas Marriott | |
2024-10-17 | create_tempfile: pass pointer to full pathname to strlcat() | Todd C. Miller | |
Fixes a potential buffer overrun. Also check strlcpy() and strlcat() return value to detect truncations. Based on a diff from naddy@. OK naddy@ tb@ deraadt@ | |||
2024-10-14 | mention SshdAuthPath option; ok djm@ | Christian Weisgerber | |
2024-10-14 | Set ACS flag for REP. Reported by Romain Francoise, GitHub issue 4182. | Nicholas Marriott | |
2024-10-14 | Split per-connection sshd-session binary | Damien Miller | |
This splits the user authentication code from the sshd-session binary into a separate sshd-auth binary. This will be executed by sshd-session to complete the user authentication phase of the protocol only. Splitting this code into a separate binary ensures that the crucial pre-authentication attack surface has an entirely disjoint address space from the code used for the rest of the connection. It also yields a small runtime memory saving as the authentication code will be unloaded after thhe authentication phase completes. Joint work with markus@ feedback deraadt@ Tested in snaps since last week | |||
2024-10-13 | don't start the ObscureKeystrokeTiming mitigations if there has been | Damien Miller | |
traffic on a X11 forwarding channel recently. Should fix X11 forwarding performance problems when this setting is enabled. Patch from Antonio Larrosa via bz3655 | |||
2024-10-13 | include stdio.h for sscanf() snprintf() | Jonathan Gray | |
2024-10-12 | remove duplicate misc.h include | Jonathan Gray | |
ok dtucker@ | |||
2024-10-12 | Call realpath on the source file to match -f on the command line, GitHub | Nicholas Marriott | |
issue 4180. | |||
2024-10-12 | Do not rename a buffer to itself, GitHub issue 4181. | Nicholas Marriott | |
2024-10-10 | Add a sixel_support format variable which is 1 if SIXEL is supported | Nicholas Marriott | |
(always 0 on OpenBSD), requested by Misaki Masa in GitHub issue 4177 | |||
2024-10-08 | Draw pane status line on the correct line when at the bottom, fixes | Nicholas Marriott | |
issues if the window size is smaller than the entire terminal. GitHub issue 3943. | |||
2024-10-08 | Put the prompt cursor attributes into the status line screen and use | Nicholas Marriott | |
that rather than updating the current screen (since there might not be one). | |||
2024-10-07 | Add prompt-cursor-colour and prompt-cursor-style to set the style of the | Nicholas Marriott | |
cursor in the command prompt and remove the emulated cursor, from Alexander Arch in GitHub issue 4170. | |||
2024-10-07 | Add initial-repeat-time option to allow the first repeat time to be | Nicholas Marriott | |
increased and later reduced, from David le Blanc in GitHub issue 4164. | |||
2024-10-06 | Turn off finite field (a.k.a modp) Diffie-Hellman key exchange in sshd | Damien Miller | |
by default. Specifically, this removes the diffie-hellman-group* and diffie-hellman-group-exchange-* methods. The client is unchanged and continues to support these methods by default. Finite field Diffie Hellman is slow and computationally expensive for the same security level as Elliptic Curve DH or PQ key agreement while offering no redeeming advantages. ECDH has been specified for the SSH protocol for 15 years and some form of ECDH has been the default key exchange in OpenSSH for the last 14 years. ok markus@ | |||
2024-10-06 | Try to stay near the same line in modes if the current one is removed. | Nicholas Marriott | |
2024-10-05 | Send focus events to pane when entering or leaving popup, GitHub issue | Nicholas Marriott | |
3991. | |||
2024-10-05 | Remove some debugging left behind. | Nicholas Marriott | |
2024-10-05 | Add copy-mode-position-format to configure the position indicator. | Nicholas Marriott | |
2024-10-04 | Document missing window-layout-changed hook. | Nicholas Marriott | |
2024-10-04 | Add -y flag to disable confirmation prompts in modes, GitHub issue 4152. | Nicholas Marriott | |
2024-10-04 | Do not translate BSpace as Unicode, GitHub issue 4156. | Nicholas Marriott | |
2024-10-04 | Rework of copy mode commands ("send-keys -X") to parse the arguments so | Nicholas Marriott | |
that flags may be detected propertly rather than just looking for strings ("-O" and so on). Also add -C and -P flags to the copy commands: -C prevents the commands from sending the text to the clipboard and -P prevents them from adding the text as a paste buffer. Note some of the default key bindings change to add "--" and any similar custom key bindings using "send-keys -X" may need a similar change. GitHub issue 4153. | |||
2024-10-03 | Improve fix for shifted keys so it works for all the keys it should, | Nicholas Marriott | |
Stanislav Kljuhhin in GitHub issue 4146. | |||
2024-10-02 | On i386 long double is 80bit expanded to 96bits or 12 bytes. This is the | Claudio Jeker | |
size that the ctftools ctfconvert uses and I think we should do as well. Fixes regress/usr.bin/ctfdump on i386. OK miod@ | |||
2024-10-02 | Add MSYSTEM to default update-environment. | Nicholas Marriott | |
2024-10-02 | Add a define for the socket permissions check so it can be overridden | Nicholas Marriott | |
more easily (for Cgywin). | |||
2024-10-02 | Report shifted keys like S-A as A not as S-A in mode 1 extended keys, | Nicholas Marriott | |
from Stanislav Kljuhhin. | |||
2024-10-01 | Add a way to make the preview larger in tree mode, GitHub issue 4124. | Nicholas Marriott | |
2024-10-01 | Use global cursor style and colour options for modes instead of default, | Nicholas Marriott | |
GitHub issue 4117. | |||
2024-10-01 | Change pasting to bypass the output key processing entirely and write | Nicholas Marriott | |
what was originally received. Fixes problems with pasted text being interpreted as extended keys reported by Mark Kelly. | |||
2024-09-30 | On some Windows terminals, if TIOCWINSZ does not return xpixel and | Nicholas Marriott | |
ypixel (they are zero), if this is the case then try the query escape sequences. From Dmitry Galchinsky in GitHub issue 4099. | |||
2024-09-30 | Only use default-shell for popups, return to /bin/sh for run-shell, | Nicholas Marriott | |
if-shell and #() - these have been documented as using /bin/sh for a long time and scripts rely on it. Pointed out by Gregory Pakosz. | |||
2024-09-29 | Fix grey colour, from Magnus Gross. | Nicholas Marriott | |
2024-09-27 | rsync: make blkhash_free() callable with NULL. | Theo Buehler | |
It is in principle possible that blkhash_free() (which obviously frees a struct blktab, sigh) is called with NULL. This would lead to a crash. ok claudio | |||
2024-09-27 | rsync: avoid reallocarray() with a nmemb of 0. | Theo Buehler | |
bset->blksz can be 0 here and how reallocarray() behaves is implementation defined. |