Age | Commit message (Collapse) | Author | |
---|---|---|---|
2008-07-13 | use struct sockaddr_storage instead of struct sockaddr for accept(2) | Damien Miller | |
address argument. from visibilis AT yahoo.com in bz#1485; ok markus@ | |||
2008-07-13 | Change "ssh-keygen -F [host] -l" to not display random art unless | Stuart Henderson | |
-v is also specified, making it consistent with the manual and other uses of -l. ok grunk@ | |||
2008-07-12 | Add ':q' as an alias to ':quit', to match old behaviour. Initial patch | Can Erkin Acar | |
from dlg@, this is a simpler version. | |||
2008-07-12 | better description for -i flag: | Damien Miller | |
s/RSA authentication/public key authentication/ | |||
2008-07-12 | unbreak; move clearing of cctx struct to before first use | Damien Miller | |
reported by dkrause@ | |||
2008-07-10 | sync v1 and v2 traffic accounting; add it to sshd, too; ok djm@, dtucker@ | Markus Friedl | |
2008-07-10 | missing bzero; from mickey; ok djm@ | Markus Friedl | |
2008-07-09 | documentation tweaks. | Igor Sobrado | |
2008-07-08 | sort options in manual page; display a better usage. | Igor Sobrado | |
2008-07-08 | fix double "usage:" | Igor Sobrado | |
2008-07-08 | - add support for recursive transfers (but not for floppies), e.g. | Martynas Venckus | |
'mget -cr 4.*' would recursively fetch (-r), and resume the previous transfers (-c) of 4.X release directories uses local matching (fnmatch), but only for recursive transfers. current behavior is not changed in any way. - while here, ifndef SMALL debugging stuff, this saves some space, for floppies - some debugging code was enabled for non-debugging mode, checks assume debug is set to zero, but it's not initially set - all "Confirm with" prompts are forced, remove redundant argument - fix usage: -C and -c are not available for SMALL discussed a year ago w/ pyr@ looks good to millert@ previous version looked good to pyr@ man page tweaks & ok jmc@ | |||
2008-07-08 | Fix an venerable bug: if we're reducing a rule that has an empty | Otto Moerbeek | |
right hand side and the yacc stackpointer is pointing at the very end of the allocated stack, we end up accessing the stack out of bounds by the implicit $$ = $1 action. Detected by my new malloc, experienced by sturm@ on sparc64; ok deraadt@ | |||
2008-07-08 | missed in last commit, to make things compile cleaner | Joris Vink | |
2008-07-08 | make these compile cleanly | Joris Vink | |
2008-07-08 | use cf->fd in cvs_remote_sendfile() instead of using a local | Joris Vink | |
variable that is only used once, which is in this case. | |||
2008-07-08 | bump version to 4.4 | Joris Vink | |
2008-07-07 | /*NOTREACHED*/ for lint warning: | Kevin Steves | |
warning: function key_equal falls off bottom without returning value ok djm@ | |||
2008-07-07 | bcachestats got bumbed too u_int64_t's and I forgot about | Thordur I. Bjornsson | |
munging systat to handle the field with; pointed out by mickey ok canacar@ | |||
2008-07-07 | we don't need arg after the debug3() was removed. from lint. | Kevin Steves | |
ok djm@ | |||
2008-07-06 | spacing. | Igor Sobrado | |
2008-07-06 | sync synopsis and usage. | Igor Sobrado | |
2008-07-06 | spacing. | Igor Sobrado | |
2008-07-05 | each utility must have its own usage and an unique set of options. | Igor Sobrado | |
diff written by millert based on a previous one by me; millert's diff has a much better style and adds support for different sets of options for each utility. ok millert@ | |||
2008-07-05 | each utility must have its own usage and its own set of options; | Igor Sobrado | |
b64encode and b64decode are equivalent to running uuencode and uudecode respectively with the -m flag specified, so this flag should not be available in these utilities; while here, fix synopsis. based on millert's diff for compress/gzip. ok millert@ | |||
2008-07-05 | grammar | Damien Miller | |
2008-07-04 | Make protocol 1 MaxAuthTries logic match protocol 2's. | Damien Miller | |
Do not treat the first protocol 2 authentication attempt as a failure IFF it is for method "none". Makes MaxAuthTries' user-visible behaviour identical for protocol 1 vs 2. ok dtucker@ | |||
2008-07-04 | handle EINTR in packet_write_poll()l ok dtucker@ | Damien Miller | |
2008-07-04 | fix compilation for !YP case; ok millert@ | Damien Miller | |
2008-07-04 | Make debug a little clearer. ok djm@ | Darren Tucker | |
2008-07-04 | support negation of groups in "Match group" block (bz#1315); ok dtucker@ | Damien Miller | |
2008-07-03 | avoid nasty double free; ok dtucker@ djm@ | Otto Moerbeek | |
2008-07-02 | When forking after authentication ("ssh -f") with ExitOnForwardFailure | Damien Miller | |
enabled, delay the fork until after replies for any -R forwards have been seen. Allows for robust detection of -R forward failure when using -f (similar to bz#92); ok dtucker@ | |||
2008-07-02 | really really remove the freebie "none" auth try for protocol 2 | Damien Miller | |
2008-07-02 | Make protocol 2 MaxAuthTries behaviour a little more sensible: | Damien Miller | |
Check whether client has exceeded MaxAuthTries before running an authentication method and skip it if they have, previously it would always allow one try (for "none" auth). Preincrement failure count before post-auth test - previously this checked and postincremented, also to allow one "none" try. Together, these two changes always count the "none" auth method which could be skipped by a malicious client (e.g. an SSH worm) to get an extra attempt at a real auth method. They also make MaxAuthTries=0 a useful way to block users entirely (esp. in a sshd_config Match block). Also, move sending of any preauth banner from "none" auth method to the first call to input_userauth_request(), so worms that skip the "none" method get to see it too. | |||
2008-07-02 | Merge duplicate host key file checks, based in part on a patch from Rob | Darren Tucker | |
Holland via bz #1348 . Also checks for non-regular files during protocol 1 RSA auth. ok djm@ | |||
2008-07-02 | increase default size of ssh protocol 1 ephemeral key from 768 to 1024 | Damien Miller | |
bits; prodded by & ok dtucker@ ok deraadt@ | |||
2008-07-01 | fix some typos; ok djm@ | Kevin Steves | |
2008-07-01 | Send CR LF during protocol banner exchanges, but only for Protocol 2 only, | Darren Tucker | |
in order to comply with RFC 4253. bz #1443, ok djm@ | |||
2008-07-01 | Check ExitOnForwardFailure if forwardings are disabled due to a failed | Darren Tucker | |
host key check. ok djm@ | |||
2008-06-30 | set speed for writing tracks in TAO. | av | |
ok and tweaks by fgsch manual page by jmc | |||
2008-06-30 | clarify that eow@openssh.com is only sent on session channels | Damien Miller | |
2008-06-30 | only send eow@openssh.com notifications for session channels; ok! markus@ | Damien Miller | |
2008-06-30 | only pass channel requests on session channels through to the session | Damien Miller | |
channel handler, avoiding spurious log messages; ok! markus@ | |||
2008-06-30 | typo: s/constraint_date/constraint_data/ | Damien Miller | |
2008-06-29 | Simplify state creation code; merge state import/export code between pfsync | Ryan Thomas McBride | |
and the state-related pf(4) ioctls, and make functions in state creation and destruction paths more robust in error conditions. All values in struct pfsync_state now in network byte order, as with pfsync. testing by david ok henning, systat parts ok canacar | |||
2008-06-29 | protocol 2 key blobs are strings, not byte arrays | Damien Miller | |
2008-06-29 | documentation tweaks. | Igor Sobrado | |
2008-06-28 | document the protocol used by ssh-agent; "looks ok" markus@ | Damien Miller | |
2008-06-28 | reset global compat flag after processing a protocol 2 signature | Damien Miller | |
request with the legacy DSA encoding flag set; ok markus | |||
2008-06-28 | revert accidental commit (nearly 2 months ago!) that | Damien Miller | |
unconditionally enabled -Werror and -g |