summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* - (djm) bz#1325: Fix SELinux in permissive mode where it wouldV_4_6Darren Tucker2007-06-282-2/+10
| | | | | | incorrectly fatal() on errors. patch from cjwatson AT debian.org; ok dtucker (backport from current)
* - djm@cvs.openbsd.org 2007/06/14 22:48:05Darren Tucker2007-06-252-12/+26
| | | | | | | [ssh.c] when waiting for the multiplex exit status, read until the master end writes an entire int of data *and* closes the client_fd; fixes mux regression spotted by dtucker, ok dtucker@
* - djm@cvs.openbsd.org 2007/06/14 21:43:25Darren Tucker2007-06-251-1/+4
| | | | | [ssh.c] handle EINTR when waiting for mux exit status properly
* - djm@cvs.openbsd.org 2007/06/14 21:43:25Darren Tucker2007-06-251-1/+4
| | | | | [ssh.c] handle EINTR when waiting for mux exit status properly
* - djm@cvs.openbsd.org 2007/06/13 00:21:27Darren Tucker2007-06-252-2/+9
| | | | | | [scp.c] don't ftruncate() non-regular files; bz#1236 reported by wood AT xmission.com; ok dtucker@
* - djm@cvs.openbsd.org 2007/06/12 11:11:08Darren Tucker2007-06-122-11/+19
| | | | | | | [ssh.c] fix slave exit value when a control master goes away without passing the full exit status by ensuring that the slave reads a full int. bz#1261 reported by frekko AT gmail.com; ok markus@ dtucker@
* - dtucker@cvs.openbsd.org 2007/06/12 11:56:15Darren Tucker2007-06-122-4/+11
| | | | | | [gss-genr.c] Pass GSS OID to gss_display_status to provide better information in error messages. Patch from Simon Wilkinson via bz 1220. ok djm@
* - (dtucker) [includes.h] Bug #1243: HAVE_PATHS -> HAVE_PATHS_H. ShouldDarren Tucker2007-06-112-2/+5
| | | | | prevent warnings about redefinitions of various things in paths.h. Spotted by cartmanltd at hotmail.com.
* - (djm) Bugzilla #1306: silence spurious error messages from hang-on-exitDarren Tucker2007-06-112-6/+9
| | | | fix; tested by dtucker@ and jochen.kirn AT gmail.com (backport from HEAD)
* - (dtucker) [mdoc2man.awk] Sync with rev 1.8, mainly for %R referenceDarren Tucker2007-06-052-2/+22
| | | | support used for RFCs.
* - dtucker@cvs.openbsd.org 2007/04/23 10:15:39Darren Tucker2007-05-202-3/+10
| | | | | | | [servconf.c] Remove debug() left over from development. ok deraadt@ (This fixes a null pointer deref on startup with Match+debug on some platforms).
* - (dtucker) [configure.ac openbsd-compat/getrrsetbyname.c] Bug #1299: Use theDarren Tucker2007-04-293-9/+29
| | | | | platform's _res if it has one. Should fix problem of DNSSEC record lookups on NetBSD as reported by Curt Sampson.
* - (tim) [auth.c configure.ac defines.h session.c openbsd-compat/port-uw.cDarren Tucker2007-03-278-17/+28
| | | | | | | openbsd-compat/port-uw.h openbsd-compat/xcrypt.c] Rework libiaf test/defines to account for IRIX having libiaf but not set_id(). Patch with & ok dtucker@ (backport from -HEAD)
* - dtucker@cvs.openbsd.org 2007/03/09 05:20:06Darren Tucker2007-03-213-7/+16
| | | | | | | | [servconf.c sshd.c] Move C/R -> kbdint special case to after the defaults have been loaded, which makes ChallengeResponse default to yes again. This was broken by the Match changes and not fixed properly subsequently. Found by okan at demirmen.com, ok djm@ "please do it" deraadt@
* - (dtucker) [cipher-3des1.c cipher-bf1.c] The OpenSSL 0.9.8e problem inDarren Tucker2007-03-133-7/+6
| | | | | bug #1291 also affects Protocol 1 3des. While at it, use compat-openssl.h in cipher-bf1.c. Patch from Juan Gallego.
* - (dtucker) [entropy.c scard-opensc.c ssh-rand-helper.c] Bug #1294: includeDarren Tucker2007-03-134-2/+9
| | | | string.h to prevent warnings, from vapier at gentoo.org.
* - (djm) [README] correct link to release notesV_4_6_P1Damien Miller2007-03-062-3/+4
|
* - (djm) Release 4.6p1Damien Miller2007-03-061-1/+2
|
* - (djm) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec]Damien Miller2007-03-064-5/+7
| | | | [contrib/suse/openssh.spec] crank spec files for release
* - djm@cvs.openbsd.org 2007/03/06 10:13:14Damien Miller2007-03-062-3/+6
| | | | | [version.h] openssh-4.6; "please" deraadt@
* - OpenBSD CVS SyncDamien Miller2007-03-062-3/+9
| | | | | | - jmc@cvs.openbsd.org 2007/03/01 16:19:33 [sshd_config.5] sort the `match' keywords;
* - (dtucker) [openbsd-compat/openssl-compat.h] Bug #1291: Work around aDarren Tucker2007-03-052-2/+11
| | | | | | bug in OpenSSL 0.9.8e that prevents aes256-ctr, aes192-ctr and arcfour256 ciphers from working correctly (disconnects with "Bad packet length" errors) as found by Ben Harris. ok djm@
* - (djm) [configure.ac] add a --without-openssl-header-check option toDamien Miller2007-03-052-5/+27
| | | | | configure, as some platforms (OS X) ship OpenSSL headers whose version does not match that of the shipping library. ok dtucker@
* - (dtucker) [regress/agent-ptrace.sh] Make ttrace gdb error a little moreDarren Tucker2007-03-032-2/+6
| | | | general to cover newer gdb versions on HP-UX.
* - (dtucker) [INSTALL] Update to autoconf-2.61.Darren Tucker2007-03-022-4/+6
|
* - (dtucker) [configure.ac] For Cygwin, read files in textmode (which allowsDarren Tucker2007-03-022-4/+9
| | | | | CRLF as well as LF lineendings) and write in binary mode. Patch from vinschen at redhat.com.
* - (tim) [buildpkg.sh.in openssh.xml.in] Clean up Solaris 10 smf(5) bits.Tim Rice2007-03-013-11/+14
| | | | "Looks sane" dtucker@
* - dtucker@cvs.openbsd.org 2007/03/01 10:28:02Darren Tucker2007-03-014-12/+19
| | | | | | | | [auth2.c sshd_config.5 servconf.c] Remove ChallengeResponseAuthentication support inside a Match block as its interaction with KbdInteractive makes it difficult to support. Also, relocate the CR/kbdint option special-case code into servconf. "please commit" djm@, ok markus@ for the relocation.
* - dtucker@cvs.openbsd.org 2007/02/28 00:55:30Darren Tucker2007-02-282-11/+24
| | | | | | | | [ssh-agent.c] Remove expired keys periodically so they don't remain in memory when the agent is entirely idle, as noted by David R. Piegdon. This is the simple fix, a more efficient one will be done later. With markus, deraadt, with & ok djm.
* - ray@cvs.openbsd.org 2007/02/24 03:30:11Darren Tucker2007-02-252-6/+9
| | | | | | | [moduli.c] - strlen returns size_t, not int. - Pass full buffer size to fgets. OK djm@, millert@, and moritz@.
* - dtucker@cvs.openbsd.org 2007/02/22 12:58:40Darren Tucker2007-02-252-3/+6
| | | | | [servconf.c] Check activep so Match and GatewayPorts work together; ok markus@
* - dtucker@cvs.openbsd.org 2007/02/21 11:00:05Darren Tucker2007-02-252-2/+10
| | | | | | | | | [sshd.c] Clear alarm() before restarting sshd on SIGHUP. Without this, if there's a SIGALRM pending (for SSH1 key regeneration) when sshd is SIGHUP'ed, the newly exec'ed sshd will get the SIGALRM and not have a handler for it, and the default action will terminate the listening sshd. Analysis and patch from andrew at gaul.org.
* - djm@cvs.openbsd.org 2007/02/20 10:25:14Darren Tucker2007-02-252-5/+18
| | | | | | [clientloop.c] set maximum packet and window sizes the same for multiplexed clients as normal connections; ok markus@
* - (dtucker) [openbsd-compat/getrrsetbyname.c] Don't attempt to callocDarren Tucker2007-02-192-5/+11
| | | | | | an array for signatures when there are none since "calloc(0, n) returns NULL on some platforms (eg Tru64), which is explicitly permitted by POSIX. Diagnosis and patch by svallet genoscope.cns.fr.
* - (dtucker) [contrib/findssl.sh] Add "which" as a shell function since someDarren Tucker2007-02-192-2/+23
| | | | platforms don't have it. Patch from dleonard at vintela.com.
* - dtucker@cvs.openbsd.org 2007/02/19 10:45:58Darren Tucker2007-02-196-40/+95
| | | | | | | | [monitor_wrap.c servconf.c servconf.h monitor.c sshd_config.5] Teach Match how handle config directives that are used before authentication. This allows configurations such as permitting password authentication from the local net only while requiring pubkey from offsite. ok djm@, man page bits ok jmc@
* - stevesk@cvs.openbsd.org 2007/02/14 14:32:00Darren Tucker2007-02-192-5/+8
| | | | | [bufbn.c] typos in comments; ok jmc@
* - djm@cvs.openbsd.org 2007/01/22 13:06:21Darren Tucker2007-02-192-3/+9
| | | | | | | | [scp.c] fix detection of whether we should show progress meter or not: scp tested isatty(stderr) but wrote the progress meter to stdout. This patch makes it test stdout. bz#1265 reported by junkmail AT bitsculpture.com; of dtucker@
* - djm@cvs.openbsd.org 2007/01/22 11:32:50Darren Tucker2007-02-192-2/+8
| | | | | | | [sftp-client.c] return error from do_upload() when a write fails. fixes bz#1252: zero exit status from sftp when uploading to a full device. report from jirkat AT atlas.cz; ok dtucker@
* - stevesk@cvs.openbsd.org 2007/01/21 01:45:35Darren Tucker2007-02-192-3/+6
| | | | | [readconf.c] spaces
* ChangeLog entries for previous 2 commitsDarren Tucker2007-02-191-1/+9
|
* - stevesk@cvs.openbsd.org 2007/01/21 01:41:54Darren Tucker2007-02-195-13/+13
| | | | | [auth-skey.c kex.c ssh-keygen.c session.c clientloop.c] spaces
* - dtucker@cvs.openbsd.org 2007/01/17 23:22:52Darren Tucker2007-02-191-2/+2
| | | | | | | [readconf.c] Honour activep for times (eg ServerAliveInterval) while parsing ssh_config and ~/.ssh/config so they work properly with Host directives. From mario.lorenz@wincor-nixdorf.com via bz #1275. ok markus@
* - jmc@cvs.openbsd.org 2007/01/12 20:20:41Darren Tucker2007-02-193-6/+11
| | | | | | | [ssh-keygen.1 ssh-keygen.c] more secsh -> rfc 4716 updates; spotted by wiz@netbsd ok markus
* - jmc@cvs.openbsd.org 2007/01/10 13:23:22Darren Tucker2007-02-192-6/+12
| | | | | | | [ssh_config.5] do not use a list for SYNOPSIS; this is actually part of a larger report sent by eric s. raymond and forwarded by brad, but i only read half of it. spotted by brad.
* - (djm) [channels.c serverloop.c] Fix so-called "hang on exit" (bz #52)Damien Miller2007-01-293-9/+29
| | | | | | when closing a tty session when a background process still holds tty fds open. Great detective work and patch by Marc Aurele La France, slightly tweaked by me; ok dtucker@
* - (dtucker) [openbsd-compat/bsd-snprintf.c] Static declarations for publicDarren Tucker2007-01-242-14/+29
| | | | | | | | library interfaces aren't very helpful. Fix up the DOPR_OUTCH macro so it works properly and modify its callers so that they don't pre or post decrement arguments that are conditionally evaluated. While there, put SNPRINTF_CONST back as it prevents build failures in some configurations. ok djm@ (for most of it)
* - (djm) [ssh-rand-helper.8] manpage nits;Damien Miller2007-01-222-4/+8
| | | | from dleonard AT vintela.com (bz#1529)
* - (dtucker) [packet.c] Re-remove in_systm.h since it's already in includes.hDarren Tucker2007-01-172-2/+6
| | | | | and multiple including it causes problems on old IRIXes. (It snuck back in during a sync.) Found (again) by Georg Schwarz.
* - (djm) [openbsd-compat/bsd-snprintf.c] Fix integer overflow in returnDamien Miller2007-01-142-64/+107
| | | | | | | value of snprintf replacement, similar to bugs in various libc implementations. This overflow is not exploitable in OpenSSH. While I'm fiddling with it, make it a fair bit faster by inlining the append-char routine; ok dtucker@
View Lorry Controller Status