Commit Graph

3836 Commits

Author SHA1 Message Date
Damien Miller b253cc4213 - avsm@cvs.openbsd.org 2005/05/24 17:32:44
[atomicio.c atomicio.h authfd.c monitor_wrap.c msg.c scp.c sftp-client.c]
     [ssh-keyscan.c sshconnect.c]
     Switch atomicio to use a simpler interface; it now returns a size_t
     (containing number of bytes read/written), and indicates error by
     returning 0.  EOF is signalled by errno==EPIPE.
     Typical use now becomes:

     if (atomicio(read, ..., len) != len)
             err(1,"read");

     ok deraadt@, cloder@, djm@
2005-05-26 12:23:44 +10:00
Damien Miller 02e754f1f0 - avsm@cvs.openbsd.org 2005/05/24 02:05:09
[ssh-keygen.c]
     some style nits from dmiller@, and use a fatal() instead of a printf()/exit
2005-05-26 12:19:39 +10:00
Damien Miller 3710f278ae - djm@cvs.openbsd.org 2005/05/23 23:32:46
[cipher.c myproposal.h ssh.1 ssh_config.5 sshd_config.5]
     add support for draft-harris-ssh-arcfour-fixes-02 improved arcfour modes;
     ok markus@
2005-05-26 12:19:17 +10:00
Damien Miller b089fb5fe1 - avsm@cvs.openbsd.org 2005/05/23 22:44:01
[moduli.c ssh-keygen.c]
     - removes signed/unsigned comparisons in moduli generation
     - use strtonum instead of atoi where its easier
     - check some strlcpy overflow and fatal instead of truncate
2005-05-26 12:16:18 +10:00
Damien Miller dfec2941ac - jmc@cvs.openbsd.org 2005/05/20 11:23:32
[ssh_config.5]
     oops - article and spacing;
2005-05-26 12:14:32 +10:00
Damien Miller ebcfedce85 - djm@cvs.openbsd.org 2005/05/20 10:50:55
[ssh_config.5]
     give a ProxyCommand example using nc(1), with and ok jmc@
2005-05-26 12:13:56 +10:00
Damien Miller 459735a0c6 - djm@cvs.openbsd.org 2005/05/19 02:42:26
[includes.h]
     fix cast, from grunk AT pestilenz.org
2005-05-26 12:13:42 +10:00
Damien Miller 06b75ad56b - djm@cvs.openbsd.org 2005/05/19 02:40:52
[sshd_config]
     whitespace nit, from grunk AT pestilenz.org
2005-05-26 12:12:37 +10:00
Damien Miller 1594ad5a78 - djm@cvs.openbsd.org 2005/05/19 02:39:55
[sshd_config.5]
     sort config options, from grunk AT pestilenz.org; ok jmc@
2005-05-26 12:12:19 +10:00
Damien Miller 17b23d8657 - markus@cvs.openbsd.org 2005/05/16 15:30:51
[readconf.c servconf.c]
     check return value from strdelim() for NULL (AddressFamily); mpech
2005-05-26 12:11:56 +10:00
Damien Miller 538c9b71ec - djm@cvs.openbsd.org 2005/05/10 10:30:43
[ssh.c]
     report real errors on fallback from ControlMaster=no to normal connect
2005-05-26 12:11:28 +10:00
Damien Miller 924c25a64e - djm@cvs.openbsd.org 2005/05/10 10:28:11
[ssh.c]
     print nice error message for EADDRINUSE as well (ID sync only)
2005-05-26 12:09:32 +10:00
Damien Miller d2ebd450f0 - markus@cvs.openbsd.org 2005/05/02 21:13:22
[readpass.c]
     missing {}
2005-05-26 12:07:47 +10:00
Damien Miller 41bfc29ea5 - moritz@cvs.openbsd.org 2005/04/28 10:17:56
[progressmeter.c ssh-keyscan.c]
     add snprintf checks. ok djm@ markus@
2005-05-26 12:07:32 +10:00
Damien Miller dadfd4dd38 - jakob@cvs.openbsd.org 2005/04/26 13:08:37
[ssh.c ssh_config.5]
     fallback gracefully if client cannot connect to ControlPath. ok djm@
2005-05-26 12:07:13 +10:00
Damien Miller ac7a0059e2 - jmc@cvs.openbsd.org 2005/04/26 12:59:02
[sftp-client.h]
     spelling correction in comment from wiz@netbsd;
2005-05-26 12:05:49 +10:00
Damien Miller ddeb75294b - dtucker@cvs.openbsd.org 2005/04/23 23:43:47
[readpass.c]
     Add debug message if read_passphrase can't open /dev/tty; bz #471;
     ok djm@
2005-05-26 12:05:28 +10:00
Damien Miller ddee575b98 - djm@cvs.openbsd.org 2005/04/21 11:47:19
[ssh.c]
     don't allocate a pty when -n flag (/dev/null stdin) is set, patch from
     ignasi.roca AT fujitsu-siemens.com (bz #829); ok dtucker@
2005-05-26 12:05:05 +10:00
Damien Miller 167ea5d026 - djm@cvs.openbsd.org 2005/04/21 06:17:50
[ssh-add.1 ssh-agent.1 ssh-keygen.1 ssh.1 ssh_config.5 sshd.8]
     [sshd_config.5] OpenSSH doesn't ever look at the $HOME environment
     variable, so don't say that we do (bz #623); ok deraadt@
2005-05-26 12:04:02 +10:00
Damien Miller a31c929f36 - jakob@cvs.openbsd.org 2005/04/20 10:05:45
[dns.c]
     do not try to look up SSHFP for numerical hostname. ok djm@
2005-05-26 12:03:31 +10:00
Damien Miller 3dc967e17b - jmc@cvs.openbsd.org 2005/04/14 12:30:30
[ssh.1]
     arg to -b is an address, not if_name;
     ok markus@
2005-05-26 12:03:15 +10:00
Damien Miller 5fd38c0ed9 - djm@cvs.openbsd.org 2005/04/09 04:32:54
[misc.c misc.h tildexpand.c Makefile.in]
     replace tilde_expand_filename with a simpler implementation, ahead of
     more whacking; ok deraadt@
2005-05-26 12:02:14 +10:00
Damien Miller 1b0de9a041 - dtucker@cvs.openbsd.org 2005/04/06 12:26:06
[ssh.c]
     Fix debug call for port forwards; patch from pete at seebeyond.com,
     ok djm@ (ID sync only - change already in portable)
2005-05-26 12:01:22 +10:00
Damien Miller 4f1d6b2c11 - djm@cvs.openbsd.org 2005/04/06 09:43:59
[sshd.c]
     avoid harmless logspam by not performing setsockopt() on non-socket;
     ok markus@
2005-05-26 11:59:32 +10:00
Damien Miller 9278ffaf71 - (djm) OpenBSD CVS Sync
- otto@cvs.openbsd.org 2005/04/05 13:45:31
     [ssh-keygen.c]
2005-05-26 11:59:06 +10:00
Damien Miller 2c04deb888 - (djm) [mpaux.c mpaux.h Makefile.in] Remove old mpaux.[ch] code, it has not
been used for a while
2005-05-26 11:35:37 +10:00
Damien Miller 6b6d5be591 - Release 4.1p1 2005-05-26 11:34:36 +10:00
Darren Tucker ae8c91ec07 - (dtucker) [openbsd-compat/bsd-cygwin_util.c] Ensure sufficient memory
allocation when retrieving core Windows environment.  Add CYGWIN variable
   to propagated variables.  Patch from vinschen at redhat.com, ok djm@
2005-05-25 19:42:10 +10:00
Darren Tucker 328118aa79 - (dtucker) [auth-pam.c] Since people don't seem to be getting the message
that USE_POSIX_THREADS is unsupported, not recommended and generally a bad
   idea, it is now known as UNSUPPORTED_POSIX_THREADS_HACK.  Attempting to use
   USE_POSIX_THREADS will now generate an error so we don't silently change
   behaviour.  ok djm@
2005-05-25 16:18:09 +10:00
Damien Miller 4d8f560c39 - (djm) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec]
[contrib/suse/openssh.spec] Update spec file versions to 4.1p1
2005-05-25 14:43:47 +10:00
Damien Miller df548bc310 - (djm) [openbsd-compat/readpassphrase.c] bz #950: Retry tcsetattr to ensure
terminal modes are reset correctly. Fix from peak AT argo.troja.mff.cuni.cz;
   "looks ok" dtucker@
2005-05-24 15:54:27 +10:00
Tim Rice b58bd0327e 20050512
- (tim) [buildpkg.sh.in] missing ${PKG_INSTALL_ROOT} in init script
   hard link section. Bug 1038.
2005-05-12 10:32:19 -07:00
Darren Tucker fa2211d93d - (dtucker) [contrib/cygwin/ssh-host-config] Add a test and warning for a
user-mode mounts in Cygwin installation.  Patch from vinschen at redhat.com.
2005-05-09 23:48:17 +10:00
Damien Miller 4f10e25684 - (djm) [ssh.c] some systems return EADDRINUSE on a bind to an already-used
unix domain socket, so catch that too; from jakob@ ok dtucker@
2005-05-04 15:33:09 +10:00
Darren Tucker 5b115d4401 - (dtucker) [canohost.c] normalise socket addresses returned by
get_remote_hostname().  This means that IPv4 addresses in log messages
   on IPv6 enabled machines will no longer be prefixed by "::ffff:" and
   AllowUsers, DenyUsers, AllowGroups, DenyGroups will match IPv4-style
   addresses only for 4-in-6 mapped connections, regardless of whether
   or not the machine is IPv6 enabled.  ok djm@
2005-05-03 19:05:32 +10:00
Darren Tucker 149da8577e typo 2005-04-25 17:03:29 +10:00
Darren Tucker af342556b9 - (dtucker) [regress/multiplex.sh] Put control socket in /tmp so running
"make tests" works even if you'r building on a filesystem that doesn't
   support sockets.  From deengert at anl.gov, ok djm@
2005-04-25 17:01:26 +10:00
Darren Tucker bf2b398327 - (dtucker) [regress/multiplex.sh] Remove cleanup call since test-exec.sh
will clean up anyway.  From tim@
2005-04-25 14:49:48 +10:00
Darren Tucker faefd2e73d - (dtucker) [regress/multiplex.sh] Use "kill -0 $pid" to check for the
existence of a process since it's more portable.  Found by jbasney at
   ncsa.uiuc.edu; ok tim@
2005-04-25 14:48:22 +10:00
Darren Tucker 2f0b5c4869 - (dtucker) [INSTALL configure.ac] Make zlib version check test for 1.1.4 or
1.2.1.2 or higher.  With tim@, ok djm@
2005-04-24 17:52:22 +10:00
Tim Rice 4149ebc0db - (tim) [config.guess] Add support for OpenServer 6. 2005-04-23 18:17:29 -07:00
Darren Tucker 48554152b9 - (dtucker) [session.c] Bug #1024: Don't check pam_session_is_open if
UseLogin is set as PAM is not used to establish credentials in that
   case.  Found by Michael Selvesteen, ok djm@
2005-04-21 19:50:55 +10:00
Darren Tucker 8d158c9937 - (dtucker) [INSTALL] Fix s/key text too. 2005-04-19 15:40:51 +10:00
Darren Tucker ad1e5e286c - (dtucker) [INSTALL] Put the s/key text and URL back together. 2005-04-19 15:31:49 +10:00
Darren Tucker d9c88138f7 - (dtucker) [INSTALL] Reference README.privsep for the privilege separation
requirements.  Pointed out by Bengt Svensson.
2005-04-19 12:21:21 +10:00
Tim Rice 2f97b8b088 - (tim) [configure.ac] UnixWare needs PASSWD_NEEDS_USERNAME 2005-04-11 19:00:18 -07:00
Darren Tucker 0f5eeff23d - (dtucker) [auth-passwd.c auth-sia.h] Remove duplicate definitions of
sys_auth_passwd, pointed out by cmadams at hiwaay.net.
2005-04-05 21:00:47 +10:00
Darren Tucker 00cadb8c35 - (dtucker) [auth-sia.c] Constify sys_auth_passwd, fixes build error on
Tru64.  Patch from cmadams at hiwaay.net.
2005-04-05 20:58:37 +10:00
Darren Tucker 9d2562cf20 - (dtucker) [configure.ac] Define HAVE_SO_PEERCRED if we have it. ok djm@ 2005-04-05 19:22:45 +10:00
Darren Tucker 69152291e7 - (dtucker) [monitor.c] Don't free buffers in audit functions, monitor_read
will free as needed.  ok tim@ djm@
2005-04-03 12:44:23 +10:00
Damien Miller 4942de5719 - djm@cvs.openbsd.org 2005/04/02 12:41:16
[scp.c]
     since ssh has xstrdup, use it instead of strdup+test. unbreaks -Werror
     build
2005-04-03 10:16:39 +10:00
Damien Miller 3dae15c611 - deraadt@cvs.openbsd.org 2005/03/31 18:39:21
[scp.c]
     copy argv[] element instead of smashing the one that ps will see; ok otto
2005-04-03 10:16:11 +10:00
Darren Tucker de0de39082 - (dtucker) [monitor.c] Remaining part of fix for bug #1006. 2005-03-31 23:52:04 +10:00
Darren Tucker 73ba43798a - (dtucker) [ssh.c] Prevent null pointer deref in port forwarding debug
message on some platforms.  Patch from pete at seebeyond.com via djm.
2005-03-31 21:51:54 +10:00
Darren Tucker f3bb434177 - (dtucker) [auth.h sshd.c openbsd-compat/port-aix.c] Bug #1006: fix bug in
handling of password expiry messages returned by AIX's authentication
   routines, originally reported by robvdwal at sara.nl.
2005-03-31 21:39:25 +10:00
Darren Tucker 83d5a9866d - jmc@cvs.openbsd.org 2005/03/18 17:05:00
[sshd_config.5]
     typo;
2005-03-31 21:33:50 +10:00
Darren Tucker 1f04ca240d - markus@cvs.openbsd.org 2005/03/16 21:17:39
[version.h]
     4.1
2005-03-31 21:31:54 +10:00
Darren Tucker 5ede2ad8a7 - jmc@cvs.openbsd.org 2005/03/16 11:10:38
[ssh_config.5]
     get the syntax right for {Local,Remote}Forward;
     based on a diff from markus;
     problem report from ponraj;
     ok dtucker@ markus@ deraadt@
2005-03-31 21:31:10 +10:00
Darren Tucker 6e1defdc5a - (dtucker) [contrib/aix/buildbff.sh] Bug #1005: Look up only the user we're
interested in which is much faster in large (eg LDAP or NIS) environments.
   Patch from dleonard at vintela.com.
2005-03-29 23:24:12 +10:00
Darren Tucker e66519d942 - (dtucker) [configure.ac openbsd-compat/port-aix.h] Prevent redefinitions
of setauthdb on AIX 5.3, reported by anders.liljegren at its.uu.se.
2005-03-21 22:46:34 +11:00
Darren Tucker 1df61452ea - (dtucker) [configure.ac] Make configure error out if the user specifies
--with-libedit but the required libs can't be found, rather than silently
   ignoring and continuing.  ok tim@
2005-03-21 09:58:07 +11:00
Darren Tucker 86a5f8dd0a - (dtucker) [configure.ac] Prevent configure --with-zlib from adding -Iyes
and -Lyes to CFLAGS and LIBS.  Pointed out by peter at slagheap.net,
   with & ok tim@
2005-03-21 09:55:17 +11:00
Tim Rice eae17cc80e - (tim) [configure.ac] remove trailing white space. 2005-03-17 16:52:20 -08:00
Tim Rice 35cc69dcb4 - (tim) [configure.ac] make some configure options a little more error proof. 2005-03-17 16:44:25 -08:00
Tim Rice 8bb561b500 - (tim) [configure.ac] portability changes on test statements. Some shells
have problems with -a operator.
2005-03-17 16:23:19 -08:00
Tim Rice 12ee8e241e - (tim) [configure.ac] Bug 998. Make path for --with-opensc optional.
Make --without-opensc work.
2005-03-17 13:37:04 -08:00
Tim Rice c3939e22fd - (tim) [contrib/caldera/openssh.spec] links in rc?.d were getting trashed
with a rpm -F
2005-03-14 17:24:51 -08:00
Darren Tucker c53c3a423c credit patch author 2005-03-14 23:24:43 +11:00
Darren Tucker 11327cc5d7 - markus@cvs.openbsd.org 2005/03/14 11:46:56
[buffer.c buffer.h channels.c]
     limit input buffer size for channels; bugzilla #896; with and ok dtucker@
2005-03-14 23:22:25 +11:00
Darren Tucker a8f553df53 - dtucker@cvs.openbsd.org 2005/03/14 11:44:42
[auth.c]
     Populate host for log message for logins denied by AllowUsers and
     DenyUsers (bz #999); ok markus@
2005-03-14 23:17:27 +11:00
Darren Tucker da1adbc2cc - dtucker@cvs.openbsd.org 2005/03/14 10:09:03
[ssh-keygen.1]
     Correct description of -H (bz #997);  ok markus@, punctuation jmc@
2005-03-14 23:15:58 +11:00
Darren Tucker 1adc2bd8d7 - jmc@cvs.openbsd.org 2005/03/12 11:55:03
[ssh_config.5]
     escape `.' at eol to avoid double spacing issues;
2005-03-14 23:14:20 +11:00
Darren Tucker 9f438a9d63 - markus@cvs.openbsd.org 2005/03/11 14:59:06
[ssh-keygen.c]
     typo, missing \n; mpech
2005-03-14 23:09:18 +11:00
Darren Tucker 90b9e02230 - deraadt@cvs.openbsd.org 2005/03/10 22:40:38
[auth-options.c]
     spacing
2005-03-14 23:08:50 +11:00
Darren Tucker 47eede77ed - deraadt@cvs.openbsd.org 2005/03/10 22:01:05
[misc.c ssh-keygen.c servconf.c clientloop.c auth-options.c ssh-add.c
     monitor.c sftp-client.c bufaux.h hostfile.c ssh.c sshconnect.c channels.c
     readconf.c bufaux.c sftp.c]
     spacing
2005-03-14 23:08:12 +11:00
Darren Tucker f899e6a526 20050312
- (dtucker) [regress/test-exec.sh] DEBUG can cause problems where debug
   output ends up in the client's output, causing regress failures.  Found
   by Corinna Vinschen.

(got 4.0 branch and HEAD slightly askew, this is to resync)
2005-03-14 23:02:46 +11:00
Darren Tucker 1d55ca748d - dtucker@cvs.openbsd.org 2005/03/10 10:15:02
[readconf.c]
     Check listen addresses for null, prevents xfree from dying during
     ClearAllForwardings (bz #996).  From  Craig Leres, ok markus@
2005-03-14 22:58:40 +11:00
Darren Tucker a21380b70e - (dtucker) [contrib/cygwin/ssh-host-config] Makes the query for the
localized name of the local administrators group more reliable.  From
   vinschen at redhat.com.
2005-03-13 21:20:18 +11:00
Darren Tucker 835903da7b - (djm) [log.c] Fix dumb syntax error; ok dtucker@
(pulled from 4.0 branch).
2005-03-09 20:12:47 +11:00
Damien Miller aa1dba62b0 - (djm) Release OpenSSH 4.0p1 2005-03-09 11:03:08 +11:00
Damien Miller 6f632bf2aa - (djm) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec]
[contrib/suse/openssh.spec] Update spec file versions
2005-03-09 11:02:41 +11:00
Damien Miller aca8626cf7 - djm@cvs.openbsd.org 2005/03/08 23:49:48
[version.h]
     OpenSSH 4.0
2005-03-09 11:00:42 +11:00
Damien Miller b096ac4674 - jmc@cvs.openbsd.org 2005/03/07 23:41:54
[ssh.1 ssh_config.5]
     more macro simplification;
2005-03-09 11:00:05 +11:00
Darren Tucker 50c7db92d6 - (dtucker) [regress/test-exec.sh] Set BIN_SH=xpg4 on OSF1/Digital Unix/Tru64
so that regress tests behave.  From Chris Adams.
2005-03-09 10:02:55 +11:00
Tim Rice c390c8dc68 - (tim) [configure.ac] SCO 3.2v4.2 no longer supported. This platform is
too old and too broken.
2005-03-07 01:21:37 -08:00
Darren Tucker 4b9ac3319e - (dtucker) [regress/test-exec.sh] Put SUDO in the right place. 2005-03-07 19:15:06 +11:00
Darren Tucker 5d909f0773 - djm@cvs.openbsd.org 2005/03/04 08:48:46
[Makefile envpass.sh]
     regress test for SendEnv config parsing bug; ok dtucker@
2005-03-07 18:35:34 +11:00
Darren Tucker 894823ec69 - djm@cvs.openbsd.org 2005/02/27 23:13:36
[login-timeout.sh]
     avoid nameservice lookups in regress test; ok dtucker@
2005-03-07 18:34:04 +11:00
Darren Tucker a0f3ba71a0 - dtucker@cvs.openbsd.org 2005/02/27 11:33:30
[multiplex.sh test-exec.sh sshd-log-wrapper.sh]
     Add optional capability to log output from regress commands; ok markus@
     Use with: make TEST_SSH_LOGFILE=/tmp/regress.log
2005-03-07 18:33:02 +11:00
Darren Tucker b712fccc18 - david@cvs.openbsd.org 2005/01/14 04:21:18
[Makefile test-exec.sh]
     pass the SUDO make variable to the individual sh tests; ok dtucker@ markus@
2005-03-07 18:27:28 +11:00
Darren Tucker 68f7213a2c - fgsch@cvs.openbsd.org 2004/12/10 01:31:30
[Makefile sftp-glob.sh]
     some globbing regress; prompted and ok djm@
2005-03-07 18:25:53 +11:00
Darren Tucker 1c56ef6ac3 - (dtucker) OpenBSD CVS Sync (regress/)
- fgsch@cvs.openbsd.org 2004/12/10 01:31:30
     [Makefile]
     some globbing regress; prompted and ok djm@
2005-03-07 17:36:18 +11:00
Darren Tucker 0d0966934e - (dtucker) [configure.ac] Disable gettext search when configuring with
BSM audit support for the time being.  ok djm@
2005-03-07 17:34:45 +11:00
Darren Tucker 2b59a6dad6 - (dtucker) [session.c sshd.c] Bug #125 comment #49: Send disconnect audit
events earlier, prevents mm_request_send errors reported by Matt Goebel.
2005-03-06 22:38:51 +11:00
Darren Tucker 3745e2bb62 - (dtucker) [monitor.c] Bug #125 comment #47: fix errors returned by monitor
when attempting to audit disconnect events.  Reported by Phil Dibowitz.
2005-03-06 22:31:35 +11:00
Damien Miller f8e7accd01 - djm@cvs.openbsd.org 2005/03/04 08:48:06
[readconf.c]
     fix SendEnv config parsing bug found by Roumen Petrov; ok dtucker@
2005-03-05 11:22:50 +11:00
Damien Miller b022b23584 - jmc@cvs.openbsd.org 2005/03/02 11:45:01
[ssh.1]
     missing word;
2005-03-05 11:22:36 +11:00
Damien Miller 7ffa367a93 - (djm) [contrib/cygwin/README] Improve Cygwin build documentation. Patch
from vinschen at redhat.com
2005-03-05 11:20:40 +11:00
Tim Rice f8f3016f9e - (tim) [regress/agent-ptrace.sh] add another possible gdb error. 2005-03-02 21:49:56 -08:00
Damien Miller 947219e6e6 - djm@cvs.openbsd.org 2005/03/02 02:21:07
[ssh.1]
     bz#987: mention ForwardX11Trusted in ssh.1,
     reported by andrew.benham AT thus.net; ok deraadt@
2005-03-02 13:22:30 +11:00