Commit Graph

3095 Commits

Author SHA1 Message Date
Darren Tucker 3e33cecf71 - markus@cvs.openbsd.org 2003/09/23 20:17:11
[Makefile.in auth1.c auth2.c auth.c auth.h auth-krb5.c canohost.c
     cleanup.c clientloop.c fatal.c gss-serv.c log.c log.h monitor.c monitor.h
     monitor_wrap.c monitor_wrap.h packet.c serverloop.c session.c session.h
     ssh-agent.c sshd.c]
     replace fatal_cleanup() and linked list of fatal callbacks with static
     cleanup_exit() function.  re-refine cleanup_exit() where appropriate,
     allocate sshd's authctxt eary to allow simpler cleanup in sshd.
     tested by many, ok deraadt@
2003-10-02 16:12:36 +10:00
Ben Lindstrom b210aa2cfa - (bal) Fix issues in openbsd-compat/realpath.c 2003-09-30 23:49:06 +00:00
Tim Rice d4d1815cae [sshd_config] UsePAM defaults to no. 2003-09-25 19:04:34 -07:00
Darren Tucker b88fcc755d - (dtucker) [configure.ac openbsd-compat/xcrypt.c] Bug #633: Remove
DISABLE_SHADOW for HP-UX, use getspnam instead of getprpwnam.  Patch from
   michael_steffens at hp.com, ok djm@
2003-09-25 20:18:33 +10:00
Darren Tucker beaf6790e1 - (dtucker) [configure.ac] IRIX5 needs the same setre[ug]id defines as IRIX6. 2003-09-24 20:03:48 +10:00
Damien Miller dbb104791b - (djm) Update version.h and spec files for HEAD 2003-09-24 08:30:18 +10:00
Damien Miller 5c3a55846a - (djm) Sync with V_3_7 branch:
- (djm) Fix SSH1 challenge kludge
   - (djm) Bug #671: Fix builds on OpenBSD
   - (djm) Bug #676: Fix PAM stack corruption
   - (djm) Fix bad free() in PAM code
   - (djm) Don't call pam_end before pam_init
   - (djm) Enable build with old OpenSSL again
   - (djm) Trim deprecated options from INSTALL. Mention UsePAM
   - (djm) Fix quote handling in sftp; Patch from admorten AT umich.edu
2003-09-23 22:12:38 +10:00
Tim Rice 7ff4e6dbe5 [configure.ac] add --disable-etc-default-login option. ok djm 2003-09-22 19:50:14 -07:00
Ben Lindstrom da4d9cf4bf - (bal) "extration" -> "extraction" in ssh-rand-helper.c; repoted by john
on #unixhelp@efnet
2003-09-22 15:36:15 +00:00
Darren Tucker 9a2c4cddad - markus@cvs.openbsd.org 2003/09/19 17:43:35
[clientloop.c sshtty.c sshtty.h]
     remove fatal callbacks from client code; ok deraadt
2003-09-22 21:16:05 +10:00
Darren Tucker 8654d16f0f - markus@cvs.openbsd.org 2003/09/19 17:40:20
[scp.c]
     error handling for remote-remote copy; #638; report Harald Koenig;
     ok millert, fgs, henning, deraadt
2003-09-22 21:14:55 +10:00
Darren Tucker aaa56cb804 - markus@cvs.openbsd.org 2003/09/19 11:33:09
[packet.c sshd.c]
     do not call packet_close on fatal; ok deraadt
2003-09-22 21:13:59 +10:00
Darren Tucker 3dbff2a93b - markus@cvs.openbsd.org 2003/09/19 11:31:33
[channels.c]
     do not call channel_free_all on fatal; ok deraadt
2003-09-22 21:12:56 +10:00
Darren Tucker 3d32622171 - markus@cvs.openbsd.org 2003/09/19 11:30:39
[ssh-keyscan.c]
     avoid fatal_cleanup, just call exit(); ok deraadt
2003-09-22 21:11:20 +10:00
Darren Tucker 6fa8abd58b - markus@cvs.openbsd.org 2003/09/19 11:29:40
[ssh-agent.c]
     provide a ssh-agent specific fatal() function; ok deraadt
2003-09-22 21:10:21 +10:00
Darren Tucker 631a4a9b3e - markus@cvs.openbsd.org 2003/09/19 09:03:00
[buffer.c]
     sign fix in buffer_dump; Jedi/Sector One; pr 3473
2003-09-22 21:08:21 +10:00
Darren Tucker a8151da5fe - markus@cvs.openbsd.org 2003/09/19 09:02:02
[packet.c]
     buffer_dump only if PACKET_DEBUG is defined; Jedi/Sector One; pr 3471
2003-09-22 21:06:46 +10:00
Darren Tucker c0815c927e - miod@cvs.openbsd.org 2003/09/18 13:02:21
[authfd.c bufaux.c dh.c mac.c ssh-keygen.c]
     A few signedness fixes for harmless situations; markus@ ok
2003-09-22 21:05:50 +10:00
Darren Tucker fb16b2411e - markus@cvs.openbsd.org 2003/09/18 08:49:45
[deattack.c misc.c session.c ssh-agent.c]
     more buffer allocation fixes; from Solar Designer; CAN-2003-0682;
     ok millert@
2003-09-22 21:04:23 +10:00
Darren Tucker d1d41b3181 - markus@cvs.openbsd.org 2003/09/18 07:56:05
[authfile.c]
     missing  buffer_free(&encrypted); #662; zardoz at users.sf.net
2003-09-22 21:01:27 +10:00
Darren Tucker d2730d39a1 - markus@cvs.openbsd.org 2003/09/18 07:54:48
[buffer.c]
     protect against double free; #660;  zardoz at users.sf.net
2003-09-22 21:00:19 +10:00
Darren Tucker bd5361b237 - markus@cvs.openbsd.org 2003/09/18 07:52:54
[sshconnect.c]
     missing {}; bug #656; jclonguet at free.fr
2003-09-22 20:59:16 +10:00
Darren Tucker 220bf133b6 - (dtucker) [contrib/aix/pam.conf] Include example pam.conf for AIX from
article by genty at austin.ibm.com, included with the author's permission.
2003-09-22 20:41:40 +10:00
Tim Rice 480ef8ddae [configure.ac] Bug 665: move 3 new AC_DEFINES outside of AC_TRY_RUN.
Report by distler AT golem ph utexas edu.
2003-09-21 21:38:11 -07:00
Tim Rice 7a74c6b428 Fix typo. s/SETEIUD_BREAKS_SETUID/SETEUID_BREAKS_SETUID/ 2003-09-21 21:00:59 -07:00
Darren Tucker 42d30828a4 - (dtucker) [INSTALL] Bug #686: Document requirement for zlib 1.1.4 or
higher.
2003-09-22 13:28:36 +10:00
Darren Tucker 051c270f88 - (dtucker) [openbsd-compat/port-aix.c] Use correct include for xmalloc.h,
add canohost.h to stop warning.  Based on patch from openssh-unix-dev at
   thewrittenword.com
2003-09-22 13:05:26 +10:00
Darren Tucker fbe3b36ca9 - (dtucker) [uidswap.c] Don't test restoration of uid on Cygwin since the
OS does not support permanently dropping privileges.  Patch from
   vinschen at redhat.com.
2003-09-22 12:54:37 +10:00
Darren Tucker 8daf4b45ea - (dtucker) [contrib/cygwin/README contrib/cygwin/ssh-host-config] Update
ssh-host-config to match current defaults, bump README version.  Patch from
   vinschen at redhat.com.
2003-09-22 12:32:00 +10:00
Darren Tucker d5e082f0d5 - (dtucker) [configure.ac openbsd-compat/fake-rfc2553.c
openbsd-compat/fake-rfc2553.h] Bug #659: Test for and handle systems with
   where gai_strerror is defined as "const char *".  Part of patch supplied
   by bugzilla-openssh at thewrittenword.com
2003-09-22 12:08:23 +10:00
Darren Tucker be79af1dfe - (dtucker) [configure.ac] Bug #659: uid swapping issues on IRIX 6.
Part of patch supplied by bugzilla-openssh at thewrittenword.com
2003-09-22 11:58:21 +10:00
Darren Tucker 0013011529 - (dtucker) [configure.ac] Bug #693: uid swapping issues on NCR MP-RAS.
Patch from david.haughton at ncr.com
2003-09-22 11:40:24 +10:00
Darren Tucker ed92b21321 - (dtucker) [configure.ac] Bug #653: uid swapping issues on Tru64. 2003-09-22 11:26:16 +10:00
Darren Tucker ed9eb02326 - (dtucker) [configure.ac] Bug #657: uid swappping issues on BSDi. 2003-09-22 11:18:47 +10:00
Darren Tucker 20379a37fa - (dtucker) [configure.ac] Bug #655: uid swapping issues on Mac OS X.
Patch from max at quendi.de.
2003-09-22 11:07:40 +10:00
Darren Tucker 8a49dd107b Wrong filename 2003-09-22 10:59:34 +10:00
Darren Tucker 782390e62e - (dtucker) [Makefile.in] Bug #644: Fix "make clean" for out-of-tree
builds.  Portability corrections from tim@.
2003-09-22 10:58:55 +10:00
Darren Tucker 4724d96ca8 - (dtucker) [acconfig.h] Updated basename test needs HAVE_BASENAME 2003-09-19 21:25:23 +10:00
Darren Tucker c11b1e8420 - (dtucker) [session.c] Bug #643: Fix size_t -> u_int and fix null deref
when /etc/default/login doesn't exist or isn't readable.  Fixes from
   jparsons-lists at saffron.net and georg.oppenberg at deu mci com.
2003-09-19 20:56:51 +10:00
Darren Tucker 91acbf211c - (dtucker) [openbsd-compat/port-aix.h] Bug #640: Don't include audit.h
unless required.  Reorder to reduce warnings.
2003-09-19 20:43:38 +10:00
Damien Miller 8040939f72 - (djm) Bug #646: Fix location of x11-ssh-askpass; Jim 2003-09-19 17:05:24 +10:00
Damien Miller 968c8d25e9 - (djm) Bug #641: Allow RedHat RPM building without GTK-2; Patch from
jason AT devrandom.org
2003-09-19 16:58:21 +10:00
Damien Miller f09ad861e6 - (djm) Bug #661: Remove duplicate check for basename; from
bugzilla-openssh AT thewrittenword.com
2003-09-19 16:41:01 +10:00
Damien Miller 677179f23a - (djm) Bug #683: Remove reference to --with-ipv4-default from INSTALL;
djast AT cs.toronto.edu
2003-09-19 16:30:14 +10:00
Damien Miller 5d07e6d465 20030918
- (djm) Bug #652: Fix empty password auth
2003-09-18 18:25:46 +10:00
Tim Rice 628c873230 [openbsd-compat/inet_ntoa.c] 20030917 "Sync with V_3_7 branch" undid
20030916 "Missed dead header in inet_ntoa.c"
2003-09-17 13:20:33 -07:00
Damien Miller e007cf7fa4 - (djm) Crank RPM spec file versions 2003-09-17 07:32:17 +10:00
Damien Miller 5efcecc265 - (djm) OpenBSD Sync
- markus@cvs.openbsd.org 2003/09/16 21:02:40
     [buffer.c channels.c version.h]
     more malloc/fatal fixes; ok millert/deraadt; ghudson at MIT.EDU
2003-09-17 07:31:14 +10:00
Damien Miller f2728099ba - (djm) Sync with V_3_7 branch 2003-09-17 07:24:25 +10:00
Ben Lindstrom e121048392 - (bal) Missed dead header in inet_ntoa. 2003-09-16 17:23:29 +00:00
Tim Rice b925b4b82f [configure.ac] Fix portability issues. 2003-09-15 22:40:49 -07:00
Ben Lindstrom f2b4e4e07e - deraadt@cvs.openbsd.org 2003/09/16 03:03:47
[buffer.c]
     do not expand buffer before attempting to reallocate it; markus ok
2003-09-16 03:31:03 +00:00
Darren Tucker 16eec18a09 Fix line width 2003-09-16 13:24:50 +10:00
Darren Tucker e1a790d0d1 - (dtucker) [acconfig.h configure.ac defines.h session.c] Bug #252: Retrieve
PATH (or SUPATH) and UMASK from /etc/default/login on platforms that have it
   (eg Solaris, Reliant Unix).  Patch from Robert.Dahlem at siemens.com.  ok djm@
2003-09-16 11:52:19 +10:00
Darren Tucker 7b6cb5c5ef - (dtucker) [regress/Makefile] AIX's make doesn't like " +=", so replace
with vanilla "=".

Hopefully everybody's "make" will be happy with that.
2003-09-14 13:16:55 +10:00
Darren Tucker b12d16fd00 - (dtucker) [Makefile regress/Makefile] Fix portability issues preventing
the regression tests from running with Solaris' make.  Patch from Brian
   Poole (raj at cerias.purdue.edu).

Further info:  Solaris' /usr/ccs/bin/make
* requires a space before "+=" (but not "=")
* does not like @for

The bit that relies on a trailing "/" on $OBJ so "rm ${OBJ}$$F works in the
current dir if OBJ isn't set is my fault.  Nasty but it works.
2003-09-14 11:40:35 +10:00
Darren Tucker c58c2eedb0 - (dtucker) [auth-pam.c] Use SSHD_PAM_SERVICE for PAM service name, patch
from cjwatson at debian.org.
2003-09-13 22:02:05 +10:00
Tim Rice ae477e922e [configure.ac] define WITH_ABBREV_NO_TTY for SCO. Report by Roger Cornelius. 2003-09-12 18:15:15 -07:00
Darren Tucker 2270c7e8aa - (dtucker) [auth-passwd.c] On AIX, call setauthdb() before loginsuccess(),
required to correctly reset failed login count when using a password
   registry other than "files" (eg LDAP, see bug #543).
2003-09-13 10:41:56 +10:00
Darren Tucker dc7e65646f - (dtucker) [regress/agent-timeout.sh] Timeout of 5 sec is borderline for
slower hosts, increase to 10 sec.
2003-09-13 09:46:03 +10:00
Tim Rice e660ede8c0 [regress/yes-head.sh] shell portability fix. 2003-09-12 13:21:14 -07:00
Tim Rice ec28ca16b1 [Makefile.in] only mkdir regress if it does not exist. 2003-09-12 13:02:16 -07:00
Tim Rice b7efb630f6 [regress/agent-ptrace.sh] sh doesn't like "if ! shell_function; then". 2003-09-12 11:20:32 -07:00
Tim Rice 23ee359b08 [regress/agent-ptrace.sh regress/dynamic-forward.sh
regress/sftp-cmds.sh regress/stderr-after-eof.sh regress/test-exec.sh]
no longer depends on which(1). patch by dtucker@
2003-09-11 22:32:17 -07:00
Tim Rice d546a84ef6 [configure.ac] Prefer setuid/setgid on UnixWare and Open Server. 2003-09-11 22:24:36 -07:00
Tim Rice 1e1ef64566 [configure.ac] Move libgen tests to before libwrap to unbreak
UnixWare 2.03 using --with-tcp-wrappers.
2003-09-11 22:19:31 -07:00
Darren Tucker c82afd5c88 - (dtucker) [configure.ac] Bug #588, #615: Move other libgen tests to after
the dirname test, to allow a broken dirname to be detected correctly.
   Based partially on patch supplied by alex.kiernan at thus.net.  ok djm@
2003-09-11 14:42:55 +10:00
Darren Tucker 9a959ea1b5 - (dtucker) [regressh/yes-head.sh] Some platforms (eg Solaris) don't have
"yes".
2003-09-10 20:17:40 +10:00
Darren Tucker b2427c82bb - (dtucker) [configure.ac] Part of bug #615: tcsendbreak might be a macro. 2003-09-10 15:22:44 +10:00
Darren Tucker 9f7ffc5a17 - (dtucker) [configure.ac] Bug #636: Add support for Cray's new X1 machine.
Patch from wendyp at cray.com.
2003-09-10 11:39:05 +10:00
Tim Rice 1eb40cf514 [regress/sftp-badcmds.sh regress/sftp-cmds.sh] Fix errors like
UX:rm: ERROR: Cannot remove '.' or '..'
2003-09-09 08:35:20 -07:00
Tim Rice 5543947d7f [regress/agent-timeout.sh] s/TIMEOUT/SSHAGENT_TIMEOUT/ Fixes conflict
with shell read-only variable.
2003-09-09 08:27:40 -07:00
Tim Rice 8b2157d86a [regress/Makefile] Fixes for building outside of a read-only source tree. 2003-09-09 06:07:10 -07:00
Tim Rice 2e0e38e310 [ssh-keygen.c] s/PATH_MAX/MAXPATHLEN/ ok mouring@ 2003-09-08 16:11:33 -07:00
Tim Rice b284e16c10 [configure.ac acconfig.h openbsd-compat/getrrsetbyname.c] test for
HEADER.ad in arpa/nameser.h
2003-09-08 14:35:16 -07:00
Tim Rice 0ac16a4492 [configure.ac openbsd-compat/getrrsetbyname.c] wrap _getshort and
_getlong in #ifndef
2003-09-08 06:33:33 -07:00
Darren Tucker 167bd9cfef - (dtucker) [CREDITS Makefile.in configure.ac mdoc2man.awk mdoc2man.pl]
Replace mdoc2man.pl with mdoc2man.awk, provided by Peter Stuge.
2003-09-07 12:34:54 +10:00
Darren Tucker 7c600f24a4 - (dtucker) [acconfig.h] Typo. 2003-09-07 11:37:27 +10:00
Darren Tucker 3393c5c36e - (dtucker) openbsd-compat/xcrypt.c] #elsif -> #elif 2003-09-07 09:43:42 +10:00
Darren Tucker e7f7580cab - (dtucker) [regress/sftp-cmds.sh] Skip quoted file test on Cygwin. 2003-09-07 09:32:58 +10:00
Darren Tucker e1e26a6c15 - (dtucker) [regress/sftp-batch.sh] Make temporary batch file name more
distinctive, so "rm ${BATCH}.*" doesn't match the script itself.
2003-09-07 09:31:02 +10:00
Darren Tucker d199b6d69b - (dtucker) [dynamic-forward.sh forwarding.sh sftp-batch.sh (all regress/)]
Add ${EXEEXT}: required to work on Cygwin.
2003-09-07 09:28:03 +10:00
Darren Tucker 57ac36ffb4 - (dtucker) [agent-ptrace.sh dynamic-forward.sh (all regress/)]
Put "which" inside quotes.
2003-09-07 09:22:21 +10:00
Darren Tucker 9f18be63ab - (dtucker) [acconfig.h configure.ac uidswap.c] Prefer setuid/setgid on AIX. 2003-09-06 16:44:39 +10:00
Darren Tucker b2db4e83a3 - (dtucker) [Makefile.in] Add distclean target for regress/, fix clean target. 2003-09-05 11:35:52 +10:00
Darren Tucker 77d07e927d - [Makefile.in regress/agent-ptrace] Fix minor regress issues on Cygwin. 2003-09-04 22:06:16 +10:00
Darren Tucker 118576556b - [Makefile.in regress/agent-getpeereid.sh] config.h is now in $BUILDDIR
not $OBJ.
2003-09-04 18:04:16 +10:00
Darren Tucker 9d9d44811b - [regress/README.regress] Add a basic readme. 2003-09-04 15:39:54 +10:00
Darren Tucker ebc3c13d40 - [regress/Makefile] Remove BSDisms. 2003-09-04 15:37:58 +10:00
Darren Tucker 6d3921f64b - [regress/test-exec.sh] Use sudo, search for "whoami" equivalent, always
use Strictmodes no, wait longer for sshd startup.
2003-09-04 15:35:48 +10:00
Darren Tucker bd05609dff - [regress/ssh-com-sftp.sh] Remove dependency on /dev/stdin. 2003-09-04 15:26:57 +10:00
Darren Tucker 4735115e4d - [regress/sftp-cmds.sh] Use portable "test" option. 2003-09-04 15:24:50 +10:00
Darren Tucker a241d87e94 - [regress/dynamic-forward.sh] Some "which" programs output on stderr. 2003-09-04 15:22:01 +10:00
Darren Tucker 53c55f4179 - [regress/agent.sh regress/proto-version.sh regress/ssh-com.sh
regress/test-exec.sh] Handle different was of echoing without newlines.
2003-09-04 15:16:56 +10:00
Darren Tucker 58f89bc14d - [regress/agent-ptrace.sh regress/agent-timeout.sh]
"grep -q" -> "grep >/dev/null"
2003-09-04 15:07:59 +10:00
Darren Tucker e15b0dd011 - [regress/sftp.sh] Remove dependency on /dev/stdin. 2003-09-04 15:00:55 +10:00
Darren Tucker c2c4223ed0 - [regress/sftp-badcmds.sh regress/sftp-cmds.sh regress/sftp.sh
regress/ssh-com-client.sh regress/ssh-com-sftp.sh regress/stderr-data.sh
     regress/transfer.sh] Use ${EXEEXT} where appropriate.
2003-09-04 14:54:39 +10:00
Darren Tucker c376a88c10 - [regress/stderr-after-eof.sh] Search for a usable checksum program. 2003-09-04 14:32:02 +10:00
Darren Tucker 933e4f1c27 - [regress/sftp-cmds.sh] Ensure file used for test are readable. 2003-09-04 14:26:31 +10:00
Darren Tucker 60de9f1851 - [regress/rekey.sh] Remove dependence on /dev/zero (not all platforms have
it).  The sparse file will take less disk space too.
2003-09-04 14:02:56 +10:00