- djm@cvs.openbsd.org 2006/03/22 21:27:15

[deattack.c deattack.h packet.c]
     remove IV support from the CRC attack detector, OpenSSH has never used
     it - it only applied to IDEA-CFB, which we don't support.
     prompted by NetBSD Coverity report via elad AT netbsd.org;
     feedback markus@ "nuke it" deraadt@
This commit is contained in:
Damien Miller 2006-03-26 14:11:39 +11:00
parent a5a2859275
commit 7cd4579eb3
1 changed files with 1 additions and 1 deletions

View File

@ -988,7 +988,7 @@ packet_read_poll1(void)
* Ariel Futoransky(futo@core-sdi.com)
*/
if (!receive_context.plaintext &&
detect_attack(buffer_ptr(&input), padded_len, NULL) == DEATTACK_DETECTED)
detect_attack(buffer_ptr(&input), padded_len) == DEATTACK_DETECTED)
packet_disconnect("crc32 compensation attack: network attack detected");
/* Decrypt data to incoming_packet. */