tyler.durden
/
openssh-portable
mirror of https://github.com/PowerShell/openssh-portable.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

- markus@cvs.openbsd.org 2003/10/21 09:50:06 

[auth2-gss.c]
     make sure the doid is larger than 2
This commit is contained in:
Darren Tucker 2003-11-03 20:05:03 +11:00
parent a47c9bcda6
commit 8cc39788cb
2 changed files with 7 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
ChangeLog
View File

@ -6,6 +6,9 @@
- markus@cvs.openbsd.org 2003/10/15 09:48:45 - markus@cvs.openbsd.org 2003/10/15 09:48:45
[monitor_wrap.c] [monitor_wrap.c]
check pmonitor != NULL check pmonitor != NULL
- markus@cvs.openbsd.org 2003/10/21 09:50:06
[auth2-gss.c]
make sure the doid is larger than 2
20031021 20031021
- (dtucker) [INSTALL] Some system crypt() functions support MD5 passwords - (dtucker) [INSTALL] Some system crypt() functions support MD5 passwords
@ -1380,4 +1383,4 @@
- Fix sshd BindAddress and -b options for systems using fake-getaddrinfo. - Fix sshd BindAddress and -b options for systems using fake-getaddrinfo.
Report from murple@murple.net, diagnosis from dtucker@zip.com.au Report from murple@murple.net, diagnosis from dtucker@zip.com.au
$Id: ChangeLog,v 1.3087 2003/11/03 09:03:25 dtucker Exp $ $Id: ChangeLog,v 1.3088 2003/11/03 09:05:03 dtucker Exp $

4
auth2-gss.c
View File

@ -1,4 +1,4 @@
/* $OpenBSD: auth2-gss.c,v 1.3 2003/09/01 20:44:54 markus Exp $ */ /* $OpenBSD: auth2-gss.c,v 1.4 2003/10/21 09:50:06 markus Exp $ */
/* /*
* Copyright (c) 2001-2003 Simon Wilkinson. All rights reserved. * Copyright (c) 2001-2003 Simon Wilkinson. All rights reserved.
@ -79,6 +79,8 @@ userauth_gssapi(Authctxt *authctxt)
xfree(doid); xfree(doid);
doid = packet_get_string(&len); doid = packet_get_string(&len);
if (len <= 2)
packet_disconnect("Short OID received");
if (doid[0] != SSH_GSS_OIDTYPE || doid[1] != len-2) { if (doid[0] != SSH_GSS_OIDTYPE || doid[1] != len-2) {
logit("Mechanism OID received using the old encoding form"); logit("Mechanism OID received using the old encoding form");