summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* - (djm) [auth-pam.c sftp.c] spaces vs. tabs at start of lineDamien Miller2005-07-175-8/+125
| | | | | | | | | | | - djm@cvs.openbsd.org 2005/07/17 06:49:04 [channels.c channels.h session.c session.h] Fix a number of X11 forwarding channel leaks: 1. Refuse multiple X11 forwarding requests on the same session 2. Clean up all listeners after a single_connection X11 forward, not just the one that made the single connection 3. Destroy X11 listeners when the session owning them goes away testing and ok dtucker@
* - (djm) [auth-pam.c sftp.c] spaces vs. tabs at start of lineDamien Miller2005-07-173-10/+11
|
* - (djm) [acss.c auth-pam.c auth-shadow.c auth-skey.c auth1.c canohost.c]Damien Miller2005-07-1711-98/+101
| | | | | [cipher-acss.c loginrec.c ssh-rand-helper.c sshd.c] Fix whitespace at EOL in portable too ("perl -p -i -e 's/\s+$/\n/' *.[ch]")
* - djm@cvs.openbsd.org 2005/07/16 01:35:24Damien Miller2005-07-179-25/+32
| | | | | | [auth1.c channels.c cipher.c clientloop.c kex.c session.c ssh.c] [sshconnect.c] spacing
* - (dtucker) [auth-pam.c] Ensure that only one side of the authenticationDarren Tucker2005-07-162-2/+12
| | | | | socketpair stays open on in both the monitor and PAM process. Patch from Joerg Sonnenberger.
* - (dtucker) [configure.ac defines.h] Define __sentinel__ to nothing if theDarren Tucker2005-07-143-3/+14
| | | | | | compiler doesn't understand it to prevent warnings. If any mainstream compiler versions acquire it we can test for those versions. Based on discussion with djm@.
* - dtucker@cvs.openbsd.org 2005/07/14 04:00:43Darren Tucker2005-07-142-3/+6
| | | | | [misc.h] use __sentinel__ attribute; ok deraadt@ djm@ markus@
* - jmc@cvs.openbsd.org 2005/07/08 12:53:10Darren Tucker2005-07-142-3/+7
| | | | | [ssh_config.5] new sentence, new line;
* - dtucker@cvs.openbsd.org 2005/07/08 10:20:41Darren Tucker2005-07-142-4/+7
| | | | | [ssh_config.5] change BindAddress to match recent ssh -b change; prompted by markus@
* - markus@cvs.openbsd.org 2005/07/08 09:41:33Darren Tucker2005-07-142-3/+11
| | | | | | | | | | [channels.h] race when efd gets closed while there is still buffered data: change CHANNEL_EFD_OUTPUT_ACTIVE() 1) c->efd must always be valid AND 2a) no EOF has been seen OR 2b) there is buffered data report, initial fix and testing Chuck Cranor
* - dtucker@cvs.openbsd.org 2005/07/08 09:26:18Darren Tucker2005-07-142-3/+6
| | | | | [misc.c] Make comment match code; ok djm@
* - dtucker@cvs.openbsd.org 2005/07/06 09:33:05Darren Tucker2005-07-142-4/+13
| | | | | [ssh.1] clarify meaning of ssh -b ; with & ok jmc@
* - (dtucker) [acconfig.h auth-krb5.c configure.ac gss-serv-krb5.c] RemoveDarren Tucker2005-07-075-13/+7
| | | | | | calls to krb5_init_ets, which has not been required since krb-1.1.x and most Kerberos versions no longer export in their public API. From sxw at inf.ed.ac.uk, ok djm@
* - (dtucker) [auth-krb5.c] There's no guarantee that snprintf will set errnoDarren Tucker2005-07-072-5/+9
| | | | | in the case where the buffer is insufficient, so always return ENOMEM. Also pointed out by sxw at inf.ed.ac.uk.
* - [auth-krb5.c auth.h gss-serv-krb5.c] Move KRB5CCNAME generation for the MITDarren Tucker2005-07-074-52/+46
| | | | | Kerberos code path into a common function and expand mkstemp template to be consistent with the rest of OpenSSH. From sxw at inf.ed.ac.uk, ok djm@
* - markus@cvs.openbsd.org 2005/07/04 14:04:11Damien Miller2005-07-062-3/+8
| | | | | [channels.c] don't forget to set x11_saved_display
* - jmc@cvs.openbsd.org 2005/07/04 11:29:51Damien Miller2005-07-062-4/+7
| | | | | [ssh_config.5] fix Xr and a little grammar;
* - djm@cvs.openbsd.org 2005/07/04 00:58:43Damien Miller2005-07-068-59/+128
| | | | | | | | | [channels.c clientloop.c clientloop.h misc.c misc.h ssh.c ssh_config.5] implement support for X11 and agent forwarding over multiplex slave connections. Because of protocol limitations, the slave connections inherit the master's DISPLAY and SSH_AUTH_SOCK rather than distinctly forwarding their own. ok dtucker@ "put it in" deraadt@
* - markus@cvs.openbsd.org 2005/07/01 13:19:47Damien Miller2005-07-062-8/+12
| | | | | [channels.c] don't free() if getaddrinfo() fails; report mpech@
* wrapDamien Miller2005-06-261-2/+3
|
* - djm@cvs.openbsd.org 2005/06/25 22:47:49Damien Miller2005-06-262-8/+11
| | | | | | [ssh.c] do the default port filling code a few lines earlier, so it really does fix %p
* - djm@cvs.openbsd.org 2005/06/18 04:30:36Damien Miller2005-06-263-4/+12
| | | | | [ssh.c ssh_config.5] allow ControlPath=none, patch from dwmw2 AT infradead.org; ok dtucker@
* - (djm) OpenBSD CVS SyncDamien Miller2005-06-263-12/+17
| | | | | | | - djm@cvs.openbsd.org 2005/06/17 22:53:47 [ssh.c sshconnect.c] Fix ControlPath's %p expanding to "0" for a default port, spotted dwmw2 AT infradead.org; ok markus@
* - (djm) [loginrec.c ssh-rand-helper.c] Fix -Wsign-compare for portable,Damien Miller2005-06-195-11/+14
| | | | tested and fixes tim@
* +opensshd.initDamien Miller2005-06-191-0/+1
|
* - djm@cvs.openbsd.org 2005/06/17 02:44:33Damien Miller2005-06-192-4/+7
| | | | [auth1.c] make this -Wsign-compare clean; ok avsm@ markus@
* - djm@cvs.openbsd.org 2005/05/20 12:57:01;Damien Miller2005-06-192-132/+200
| | | | | | [auth1.c] split protocol 1 auth methods into separate functions, makes authloop much more readable; fixes and ok markus@ (portable ok & polish dtucker@)
* - (dtucker) [cipher.c openbsd-compat/openbsd-compat.hDarren Tucker2005-06-174-7/+13
| | | | | | | | | openbsd-compat/openssl-compat.c] only include openssl compat stuff where it's needed as it can cause conflicts elsewhere (eg xcrypt.c). Found by and ok tim@ ---------------------------------------------------------------------- automatically CVS: CVS: Committing in . CVS: CVS: Modified Files: ----------------------------------------------------------------------
* - djm@cvs.openbsd.org 2005/06/17 02:44:33Damien Miller2005-06-1735-134/+160
| | | | | | | | | | | [auth-rsa.c auth.c auth1.c auth2-chall.c auth2-gss.c authfd.c authfile.c] [bufaux.c canohost.c channels.c cipher.c clientloop.c dns.c gss-serv.c] [kex.c kex.h key.c mac.c match.c misc.c packet.c packet.h scp.c] [servconf.c session.c session.h sftp-client.c sftp-server.c sftp.c] [ssh-keyscan.c ssh-rsa.c sshconnect.c sshconnect1.c sshconnect2.c sshd.c] make this -Wsign-compare clean; ok avsm@ markus@ NB. auth1.c changes not committed yet (conflicts with uncommitted sync) NB2. more work may be needed to make portable Wsign-compare clean
* - markus@cvs.openbsd.org 2005/06/16 08:00:00Damien Miller2005-06-174-9/+15
| | | | | | [canohost.c channels.c sshd.c] don't exit if getpeername fails for forwarded ports; bugzilla #1054; ok djm
* - (djm) OpenBSD CVS SyncDamien Miller2005-06-176-122/+138
| | | | | | | - djm@cvs.openbsd.org 2005/06/16 03:38:36 [channels.c channels.h clientloop.c clientloop.h ssh.c] move x11_get_proto from ssh.c to clientloop.c, to make muliplexed xfwd easier later; ok deraadt@
* - dtucker@cvs.openbsd.org 2005/06/09 13:43:49Damien Miller2005-06-162-2/+6
| | | | | | [cipher.c] Correctly initialize end of array sentinel; ok djm@ (Id sync only, change already in portable)
* - djm@cvs.openbsd.org 2005/06/08 11:25:09Damien Miller2005-06-166-16/+79
| | | | | | [clientloop.c readconf.c readconf.h ssh.c ssh_config.5] add ControlMaster=auto/autoask options to support opportunistic multiplexing; tested avsm@ and jakob@, ok markus@
* - djm@cvs.openbsd.org 2005/06/08 03:50:00Damien Miller2005-06-164-8/+12
| | | | | | [ssh-keygen.1 ssh-keygen.c sshd.8] increase default rsa/dsa key length from 1024 to 2048 bits; ok markus@ deraadt@
* - djm@cvs.openbsd.org 2005/06/06 11:20:36Damien Miller2005-06-168-84/+119
| | | | | | [auth.c auth.h misc.c misc.h ssh.c ssh_config.5 sshconnect.c] introduce a generic %foo expansion function. replace existing % expansion and add expansion to ControlPath; ok markus@
* - (djm) OpenBSD CVS SyncDamien Miller2005-06-162-14/+42
| | | | | | - jaredy@cvs.openbsd.org 2005/06/07 13:25:23 [progressmeter.c] catch SIGWINCH and resize progress meter accordingly; ok markus dtucker
* typoDarren Tucker2005-06-091-2/+2
|
* - (dtucker) [cipher.c openbsd-compat/Makefile.inDarren Tucker2005-06-096-44/+124
| | | | | | openbsd-compat/openbsd-compat.{c,h} openbsd-compat/openssl-compat.h] Move compatibility code for supporting older OpenSSL versions to the compat layer. Suggested by and "no objection" djm@
* - (dtucker) [configure.ac] Continue the hunt for LLONG_MIN and LLONG_MAX:Darren Tucker2005-06-072-2/+71
| | | | | in today's episode we attempt to coax it from limits.h where it may be hiding, failing that we take the DIY approach. Tested by tim@
* - (djm) [README README.privsep] Mention FreeBSD and NetBSD as beingDamien Miller2005-06-052-6/+7
| | | | supported by privsep. Requested by des AT des.no
* - (dtucker) [configure.ac] Point configure's reporting address at theDarren Tucker2005-06-032-3/+5
| | | | openssh-unix-dev list. ok tim@ djm@
* - (dtucker) [configure.ac] Only try gcc -std=gnu99 if LLONG_MAX isn'tDarren Tucker2005-06-032-10/+22
| | | | | | defined, and check that it helps before keeping it in CFLAGS. Some old gcc's don't set an error code when encountering an unknown value in -std. Found and tested by tim@.
* - (tim) [configure.ac] Some platforms need sys/types.h for arpa/nameser.h.Tim Rice2005-06-022-4/+12
| | | | | | Take AC_CHECK_HEADERS test out of ultrix section. It caused other platforms to skip builtin standard includes tests. (first AC_CHECK_HEADERS test must be run on all platforms) Add missing ;; to case statement. OK dtucker@
* - (tim) [configure.ac] set TEST_SHELL for OpenServer 6Tim Rice2005-06-012-2/+8
|
* - (tim) [config.guess config.sub] Update to '2005-05-27' version.Tim Rice2005-06-013-290/+439
|
* - djm@cvs.openbsd.org 2005/05/27 08:30:37Darren Tucker2005-06-012-4/+17
| | | | | | [ssh.c] fix -O for cases where no ControlPath has been specified or socket at ControlPath is not contactable; spotted by and ok avsm@
* - dtucker@cvs.openbsd.org 2005/05/26 09:08:12Darren Tucker2005-06-012-3/+6
| | | | | [ssh-keygen.c] uint32_t -> u_int32_t for consistency; ok djm@
* - avsm@cvs.openbsd.org 2005/05/26 02:08:05Darren Tucker2005-06-012-6/+14
| | | | | | | | [scp.c] If copying multiple files to a target file (which normally fails, as it must be a target directory), kill the spawned ssh child before exiting. This stops it trying to authenticate and spewing lots of output. deraadt@ ok
* - (dtucker) [configure.ac openbsd-compat/Makefile.in openbsd-compat/strtoll.c]Darren Tucker2005-06-014-4/+159
| | | | Add strtoll to the compat library, from OpenBSD.
* - (dtucker) [configure.ac] Look for _getshort and _getlong inDarren Tucker2005-06-012-3/+8
| | | | arpa/nameser.h.
View Lorry Controller Status