9023 Commits

Author SHA1 Message Date
jsg@openbsd.org
e13aad66e7 upstream commit
remove a static array unused since rev 1.306 spotted by
clang ok djm@

Upstream-ID: 249b3eed2446f6074ba2219ccc46919dd235a7b8
2017-04-28 13:26:36 +10:00
millert@openbsd.org
91bd218186 upstream commit
Avoid potential signed int overflow when parsing the file
size. Use strtoul() instead of parsing manually.  OK djm@

Upstream-ID: 1f82640861c7d905bbb05e7d935d46b0419ced02
2017-04-28 13:26:36 +10:00
Yanbing
d7ab0aa717 fix for issue 685 (#122)
PowerShell/Win32-OpenSSH#685
2017-04-27 11:47:01 -07:00
Manoj Ampalam
1ff1b07410 Run SSHD as NetworkService (#121)
PowerShell/Win32-OpenSSH#681
2017-04-24 22:02:03 -07:00
Darren Tucker
17a54a03f5 Fix typo in "socketcall".
Pointed out by jjelen at redhat.com.
2017-04-25 08:32:27 +10:00
Darren Tucker
8b0eee148f Deny socketcall in seccomp filter on ppc64le.
OpenSSL is using socket() calls (in FIPS mode) when handling ECDSA keys
in privsep child. The socket() syscall is already denied in the seccomp
filter, but in ppc64le kernel, it is implemented using socketcall()
syscall, which is not denied yet (only SYS_SHUTDOWN is allowed) and
therefore fails hard.

Patch from jjelen at redhat.com.
2017-04-24 19:40:31 +10:00
Manoj Ampalam
bc3f21a6a3 Updated Build helper PS module to support builds with NoOpenSSL 2017-04-19 22:07:37 -07:00
schwarze@openbsd.org
f8500b2be5 upstream commit
Recognize nl_langinfo(CODESET) return values "646" and ""
as aliases for "US-ASCII", useful for different versions of NetBSD and
Solaris. Found by dtucker@ and by Tom G. Christensen <tgc at jupiterrise dot
com>. OK dtucker@ deraadt@

Upstream-ID: 38c2133817cbcae75c88c63599ac54228f0fa384
2017-04-18 10:17:46 +10:00
jsg@openbsd.org
7480dfedf8 upstream commit
Change COMPILER_VERSION tests which limited additional
warnings to gcc4 to instead skip them on gcc3 as clang can handle
-Wpointer-sign and -Wold-style-definition.

Upstream-ID: 5cbe348aa76dc1adf55be6c0e388fafaa945439a
2017-04-18 10:16:50 +10:00
Manoj Ampalam
852173dc70 cranked version 2017-04-16 13:27:47 -07:00
Manoj Ampalam
5218d4fc45 Revereted "Take Ownership Privileges" change on key auth tokens
Fixed https://github.com/PowerShell/Win32-OpenSSH/issues/611
2017-04-16 13:17:57 -07:00
Oleg S
258c10c4dc win32: Fix include types.h from win32compat directory (#111) 2017-04-16 12:56:28 -07:00
Oleg S
ab9e5f0452 sshd: Fix mem leak after call GetCommandLineW (#112) 2017-04-16 12:55:35 -07:00
Manoj Ampalam
c3c5c1fa7f Support I/O redirection in all ssh clients (ssh.exe, sftp.exe and scp.exe) (#113)
PowerShell/Win32-OpenSSH#668
2017-04-14 16:15:32 -07:00
Manoj Ampalam
b924b42dea Ported recent changes for Windows 2017-04-10 16:10:15 -07:00
Manoj Ampalam
b533d79ced Removed md-sha256.c from libssh 2017-04-10 15:17:25 -07:00
Manoj Ampalam
e91d1f7ef1 Merge branch 'master' of https://github.com/openssh/openssh-portable into latestw 2017-04-10 15:11:19 -07:00
Manoj Ampalam
3965d200c7 Removed ssh-lsa.dll and setup reboot restriction (#108)
https://github.com/PowerShell/Win32-OpenSSH/issues/657
2017-04-08 09:27:15 -07:00
Manoj Ampalam
53aa139ec8 Fixed: High CPU usage and log file growing up (https://github.com/PowerShell/Win32-OpenSSH/issues/606)
Added fix recommended by @richard-browne [here](https://github.com/PowerShell/Win32-OpenSSH/files/414456/sockio.c.txt)
2017-04-05 12:29:41 -07:00
Manoj Ampalam
5ea573d04e Cranked version, Added Package-OpenSSH routine, updated install-sshd (#106) 2017-04-04 12:05:31 -07:00
djm@openbsd.org
4d827f0d75 upstream commit
disallow creation (of empty files) in read-only mode;
reported by Michal Zalewski, feedback & ok deraadt@

Upstream-ID: 5d9c8f2fa8511d4ecf95322994ffe73e9283899b
2017-04-04 10:26:01 +10:00
deraadt@openbsd.org
ef47843af0 upstream commit
incorrect renditions of this quote bother me

Upstream-ID: 1662be3ebb7a71d543da088119c31d4d463a9e49
2017-04-04 10:26:01 +10:00
Manoj Ampalam
34a3f92bcd Fix (#105)
https://github.com/PowerShell/Win32-OpenSSH/issues/556
2017-04-03 13:48:23 -07:00
Manoj Ampalam
c09ef3f1cb Fixed sshfs issue
https://github.com/PowerShell/Win32-OpenSSH/issues/586
2017-04-03 13:36:29 -07:00
bagajjal
589f2db723 Enabled SFTP E2E tests based on test framework changes (#101) 2017-03-31 11:47:24 -07:00
Darren Tucker
d9048861be Check for and use gcc's -pipe.
Speeds up configure and build by a couple of percent.  ok djm@
2017-03-31 11:04:43 +11:00
Yanbing
0d1b232d3b Terminal escape sequence handling in a non-TTY stream for Windows (#94)
To prevent screwing up terminal settings on windows when printing to the terminal, turn off the virtual termial before print out to console. The file call these funtions are from scp.c,  sftp.c and sshconnect(calls smprintf). The virtual termial are not enabled in scp and sftp. turn off it in vfmprintf is enough for now.
2017-03-29 12:52:51 -07:00
Yanbing
6c7fb47a07 Test scripts updates and readme (#97) 2017-03-29 12:48:26 -07:00
Manoj Ampalam
2d94c9b3aa Replaced ntrights with Powershell equivalent logic (#99)
https://github.com/PowerShell/Win32-OpenSSH/issues/234
2017-03-28 22:35:32 -07:00
Darren Tucker
282cad2240 Import fmt_scaled.c rev 1.16 from OpenBSD.
Fix overly-conservative overflow checks on mulitplications and add checks
on additions.  This allows scan_scaled to work up to +/-LLONG_MAX (LLONG_MIN
will still be flagged as a range error).  ok millert@
2017-03-29 16:34:44 +11:00
Darren Tucker
c73a229e4e Import fmt_scaled.c rev 1.15 from OpenBSD.
Collapse underflow and overflow checks into a single block.
ok djm@ millert@
2017-03-29 16:34:02 +11:00
Darren Tucker
d427b73bf5 Import fmt_scaled.c rev 1.14 from OpenBSD.
Catch integer underflow in scan_scaled reported by Nicolas Iooss.
ok deraadt@ djm@
2017-03-29 16:32:57 +11:00
Darren Tucker
d13281f296 Don't check privsep user or path when unprivileged
If running with privsep (mandatory now) as a non-privileged user, we
don't chroot or change to an unprivileged user however we still checked
the existence of the user and directory.  Don't do those checks if we're
not going to use them.  Based in part on a patch from Lionel Fourquaux
via Corinna Vinschen, ok djm@
2017-03-29 12:39:39 +11:00
Darren Tucker
f2742a481f Remove SHA256 EVP wrapper implementation.
All supported versions of OpenSSL should now have SHA256 so remove our
EVP wrapper implementaion.  ok djm@
2017-03-29 10:50:31 +11:00
Darren Tucker
5346f271fc Remove check for OpenSSL < 0.9.8g.
We no longer support OpenSSL < 1.0.1 so remove check for unreliable ECC
in OpenSSL < 0.9.8g.
2017-03-29 10:23:58 +11:00
Darren Tucker
8fed0a5fe7 Remove compat code for OpenSSL < 0.9.7.
Resyncs that code with OpenBSD upstream.
2017-03-29 10:16:15 +11:00
Darren Tucker
608ec1f62f Remove SSHv1 code path.
Server-side support for Protocol 1 has been removed so remove !compat20
PAM code path.
2017-03-29 09:50:54 +11:00
Manoj Ampalam
6fd81a671c Temporary fix to ssh redirection issue in Powershell environment (+ one other minor fix) (#98)
PowerShell/Win32-OpenSSH#609
PowerShell/Win32-OpenSSH#608
2017-03-28 14:54:19 -07:00
bagajjal
dd8cfb0e06 fixed the console scroll down issue
https://github.com/PowerShell/Win32-OpenSSH/issues/585
2017-03-25 00:07:30 -07:00
Manoj Ampalam
b5b05a5eac Added HAVE_LLABS to account for openssh master changes 2017-03-24 13:10:01 -07:00
Manoj Ampalam
77117380e5 Merge branch 'master' of https://github.com/openssh/openssh-portable into latestw 2017-03-24 12:51:38 -07:00
Manoj Ampalam
0f8c57063f Merge branch 'latestw' of https://github.com/PowerShell/openssh-portable into latestw_all 2017-03-24 12:49:31 -07:00
Yanbing
425bc4033f latestw + Test Infra upgrades
Includes
- CR changes for upstream PR
- Fix in spawn_child logic
- Test Infra upgrades
2017-03-24 12:35:52 -07:00
Darren Tucker
7af27bf538 Enable ldns when using ldns-config.
Actually enable ldns when attempting to use ldns-config.  bz#2697, patch
from fredrik at fornwall.net.
2017-03-24 09:44:56 +11:00
Damien Miller
58b8cfa2a0 Missing header on Linux/s390
Patch from Jakub Jelen
2017-03-22 12:43:02 +11:00
djm@openbsd.org
096fb65084 upstream commit
remove /usr/bin/time calls around tests, makes diffing test
runs harder. Based on patch from Mike Frysinger

Upstream-Regress-ID: 81c1083b14dcf473b23d2817882f40b346ebc95c
2017-03-21 09:09:59 +11:00
Damien Miller
6b853c6f8b Fix syntax error on Linux/X32
Patch from Mike Frysinger
2017-03-21 08:47:55 +11:00
Darren Tucker
d38f05dbdd Add llabs() implementation. 2017-03-20 13:39:27 +11:00
Damien Miller
72536316a2 crank version numbers 2017-03-20 12:23:04 +11:00
djm@openbsd.org
3be52bc36b upstream commit
openssh-7.5

Upstream-ID: b8b9a4a949427c393cd868215e1724ceb3467ee5
2017-03-20 12:20:19 +11:00