- djm@cvs.openbsd.org 2006/03/22 21:27:15
[deattack.c deattack.h packet.c] remove IV support from the CRC attack detector, OpenSSH has never used it - it only applied to IDEA-CFB, which we don't support. prompted by NetBSD Coverity report via elad AT netbsd.org; feedback markus@ "nuke it" deraadt@
This commit is contained in:
parent
a5a2859275
commit
7cd4579eb3
2
packet.c
2
packet.c
|
@ -988,7 +988,7 @@ packet_read_poll1(void)
|
|||
* Ariel Futoransky(futo@core-sdi.com)
|
||||
*/
|
||||
if (!receive_context.plaintext &&
|
||||
detect_attack(buffer_ptr(&input), padded_len, NULL) == DEATTACK_DETECTED)
|
||||
detect_attack(buffer_ptr(&input), padded_len) == DEATTACK_DETECTED)
|
||||
packet_disconnect("crc32 compensation attack: network attack detected");
|
||||
|
||||
/* Decrypt data to incoming_packet. */
|
||||
|
|
Loading…
Reference in New Issue