Tess Gauthier
59aba65cf2
add double-quotes around service paths for SSHD and SSH-Agent ( #710 )
2023-12-18 12:04:57 -05:00
Tess Gauthier
e7010dc405
cherry-pick of kex-strict extension from upstream ( #709 )
2023-12-18 12:04:18 -05:00
Tess Gauthier
58150f0983
add codeql suppression justification for restart ( #708 )
2023-12-13 11:27:41 -05:00
Tess Gauthier
c1e15ab968
Crank versions ( #707 )
...
* bump-dependency-versions
* Update version.rc
2023-12-12 11:11:35 -05:00
Tess Gauthier
2745347ae0
Merge pull request #703 from tgauth/merge-9.5
...
Merge 9.5
2023-12-07 14:41:39 -05:00
Tess Gauthier
9f9fd0d09d
add check for pipes to do_upload ( #704 )
...
* add check for pipes to do_upload
* add parentheses
* add pester tests to sftp
* use pester 3.4 assertions
* add debug
* temp build in debug
* temp build in debug
* revert building CI in debug
* remove pester test for changes; will test manually
2023-12-07 14:37:36 -05:00
Tess Gauthier
4cd3519fbf
Add telemetry event ( #702 )
...
* test sending new event from sshd after kex exchange
* rename telemetry event for clarity
* add comments
* remove else since if block has fatal call
* rename method for additional clarity
2023-12-07 14:35:34 -05:00
tgauth@bu.edu
e10443e229
remove debug statements from pester tests
2023-12-01 15:49:33 -05:00
Andrew
4ee8dc6498
Removed sha1-based MACs from default config ( #706 )
2023-11-30 18:08:35 -08:00
tgauth@bu.edu
a6248c1e5b
add SCP symlink coverage to Pester Tests in place of Bash tests
2023-11-30 16:50:01 -05:00
tgauth@bu.edu
42e182fd4a
fix scp.sh test failures
2023-11-30 15:27:59 -05:00
tgauth@bu.edu
476d7f5a26
add comments to bash test changes
2023-11-29 16:54:45 -05:00
tgauth@bu.edu
702f528bb7
add SCP sym link tests to Windows pester tests
2023-11-29 14:15:23 -05:00
tgauth@bu.edu
00ef5b4d9c
remove sym link part of scp bash tests on Windows
2023-11-29 11:41:35 -05:00
tgauth@bu.edu
0c1b7a7d26
rename path_append to sftp_path_append within WINDOWS ifdef
2023-11-01 10:03:52 -04:00
tgauth@bu.edu
e6fa11e07e
openssh-9.5p1
...
-----BEGIN SSH SIGNATURE-----
U1NIU0lHAAAAAQAAAH8AAAAic2stZWNkc2Etc2hhMi1uaXN0cDI1NkBvcGVuc3NoLmNvbQ
AAAAhuaXN0cDI1NgAAAEEEucmjdlUMQ1hkZebm472VTtvSIMWrmAelO7Uxoc9ZMR892/D4
CMVBD+rliLO4wmRcawx1iZuUkQllgemb0hLtmQAAAARzc2g6AAAAA2dpdAAAAAAAAAAGc2
hhNTEyAAAAeAAAACJzay1lY2RzYS1zaGEyLW5pc3RwMjU2QG9wZW5zc2guY29tAAAASQAA
ACEA7WcEKKcqxpjfRRhVOznHOSsf6SlAWbpkBYA01cN3nl0AAAAgIlhw5EaLbGdhj9DaVi
Mtgw72SsEKJdOA52IQKECVmAQAAAAEDw==
-----END SSH SIGNATURE-----
resolve merge conflicts; scp and sftp fail to compile
2023-10-30 17:06:35 -04:00
Tess Gauthier
cb23f0d9c0
revert enabling sdl check compiler option for debug builds ( #700 )
2023-10-16 09:57:03 -04:00
Tess Gauthier
0ffb0ceb64
remove redundant WINDOWS preprocessor definitions ( #697 )
2023-10-16 09:56:42 -04:00
Tess Gauthier
f72324ffa1
disable adding pkcs11 providers to ssh-agent remotely unless overridden by cli arg ( #699 )
2023-10-11 16:39:05 -04:00
Tess Gauthier
effdb65e40
Enable sdl check ( #695 )
...
* enable sdl checks during compilation
* fix sdl errors in Windows code
* fix sdl errors in common code without ifdefs, for now
2023-10-04 13:11:53 -04:00
Tess Gauthier
39bf3d4fce
Enable /CETCOMPAT in x86, x64 Linker Additional Options ( #696 )
...
* enable spectre mitigation in vcxproj
* add linker compat option and sdl compile checks where applicable
* add linker switch to x64 and x86 arch
2023-10-04 12:59:38 -04:00
Damien Miller
80a2f64b8c
crank version numbers
2023-10-04 15:34:10 +11:00
djm@openbsd.org
f65f187b10
upstream: openssh-9.5
...
OpenBSD-Commit-ID: 5e0af680480bd3b6f5560cf840ad032d48fd6b16
2023-10-04 15:33:36 +11:00
djm@openbsd.org
ffe27e54a4
upstream: add some cautionary text about % token expansion and
...
shell metacharacters; based on report from vinci AT protonmail.ch
OpenBSD-Commit-ID: aa1450a54fcee2f153ef70368d90edb1e7019113
2023-10-04 15:33:27 +11:00
djm@openbsd.org
60ec3d54fd
upstream: fix link to agent draft; spotted by Jann Horn
...
OpenBSD-Commit-ID: ff5bda21a83ec013db683e282256a85201d2dc4b
2023-10-04 15:30:19 +11:00
Damien Miller
12e2d4b13f
use portable provider allowlist path in manpage
...
spotted by Jann Horn
2023-10-04 10:54:04 +11:00
Tess Gauthier
4e5f11a82c
enable spectre mitigation in vcxproj ( #694 )
2023-10-02 15:16:33 -04:00
deraadt@openbsd.org
6c2c6ffde7
upstream: typo; from Jim Spath
...
OpenBSD-Commit-ID: 2f5fba917b5d4fcf93d9e0b0756c7f63189e228e
2023-10-01 10:57:54 +11:00
Tess Gauthier
96f8702f79
Crank versions ( #693 )
...
* Update version.rc
* Update libressl version in paths.targets
2023-09-28 16:39:39 -04:00
Sam Hocevar
1ab66dd3d4
Fix unreasonably small DefaultShellCommandOption size limit ( #683 )
2023-09-28 14:34:08 -04:00
s911415
1146f366ed
fix session id2 datetype missmatch ( #679 )
...
* fix session id2 datetype missmatch
* update session_id2_len definition with WINDOWS identifier
2023-09-28 13:17:26 -04:00
Tess Gauthier
24449c64b7
Merge pull request #684 from tgauth/merge-9.4
...
Merge 9.4
2023-09-27 15:33:29 -04:00
djm@openbsd.org
b6b49130a0
upstream: rename remote_glob() -> sftp_glob() to match other API
...
OpenBSD-Commit-ID: d9dfb3708d824ec02970a84d96cf5937e0887229
2023-09-11 09:14:02 +10:00
djm@openbsd.org
21b79af6c8
upstream: typo in comment
...
OpenBSD-Commit-ID: 69285e0ce962a7c6b0ab5f17a293c60a0a360a18
2023-09-11 09:13:42 +10:00
Darren Tucker
41232d2553
Use zero-call-used-regs=used with Apple compilers.
...
Apple's versions of clang have version numbers that do not match the
corresponding upstream clang versions. Unfortunately, they do still
have the clang-15 zero-call-used-regs=all bug, so for now use the value
that doesn't result in segfaults. We could allowlist future versions
that are known to work. bz#3584 (and probably also our github CI
failures).
2023-09-10 15:45:38 +10:00
djm@openbsd.org
90ccc5918e
upstream: randomise keystroke obfuscation intervals and average
...
interval rate. ok dtucker@
OpenBSD-Commit-ID: 05f61d051ab418fcfc4857ff306e420037502382
2023-09-10 13:27:40 +10:00
djm@openbsd.org
bd1b9e52f5
upstream: fix sizeof(*ptr) instead sizeof(ptr) in realloc (pointer here
...
is char**, so harmless); spotted in CID 416964
OpenBSD-Commit-ID: c61caa4a5a667ee20bb1042098861e6c72c69002
2023-09-08 16:35:40 +10:00
djm@openbsd.org
c4f9664829
upstream: regress test recursive remote-remote directories copies where
...
the directory contains a symlink to another directory.
also remove errant `set -x` that snuck in at some point
OpenBSD-Regress-ID: 1c94a48bdbd633ef2285954ee257725cd7bc456f
2023-09-08 16:12:05 +10:00
djm@openbsd.org
5e1dfe5014
upstream: fix recursive remote-remote copies of directories that
...
contain symlinks to other directories (similar to bz3611)
OpenBSD-Commit-ID: 7e19d2ae09b4f941bf8eecc3955c9120171da37f
2023-09-08 16:11:58 +10:00
djm@openbsd.org
7c0ce2bf98
upstream: regress test for recursive copies of directories containing
...
symlinks to other directories. bz3611, ok dtucker@
OpenBSD-Regress-ID: eaa4c29cc5cddff4e72a16bcce14aeb1ecfc94b9
2023-09-08 15:59:21 +10:00
djm@openbsd.org
2de990142a
upstream: the sftp code was one of my first contributions to
...
OpenSSH and it shows - the function names are terrible.
Rename do_blah() to sftp_blah() to make them less so.
Completely mechanical except for sftp_stat() and sftp_lstat() which
change from returning a pointer to a static variable (error-prone) to
taking a pointer to a caller-provided receiver.
OpenBSD-Commit-ID: eb54d6a72d0bbba4d623e2175cf5cc4c75dc2ba4
2023-09-08 15:59:08 +10:00
djm@openbsd.org
249d8bd047
upstream: fix scp in SFTP mode recursive upload and download of
...
directories that contain symlinks to other directories. In scp mode, the
links would be followed, but in SFTP mode they were not. bz3611, ok dtucker@
OpenBSD-Commit-ID: 9760fda668eaa94a992250d7670dfbc62a45197c
2023-09-08 15:58:24 +10:00
tgauth@bu.edu
ffd23297ae
add comments
2023-09-07 16:59:04 -04:00
Tess Gauthier
ae0f346a7a
fix typo
2023-09-07 14:11:27 -04:00
Tess Gauthier
33f1ab9391
Update codeql.yml ( #687 )
2023-09-07 10:29:46 -04:00
djm@openbsd.org
0e1f4401c4
upstream: regression test for override of subsystem in match blocks
...
OpenBSD-Regress-ID: 5f8135da3bfda71067084c048d717b0e8793e87c
2023-09-07 09:58:04 +10:00
djm@openbsd.org
8a1450c620
upstream: allow override of Sybsystem directives in sshd Match
...
blocks
OpenBSD-Commit-ID: 3911d18a826a2d2fe7e4519075cf3e57af439722
2023-09-07 09:54:47 +10:00
djm@openbsd.org
6e52826e2a
upstream: allocate the subsystems array as necessary and remove the
...
fixed limit of subsystems. Saves a few kb of memory in the server and makes
it more like the other options.
OpenBSD-Commit-ID: e683dfca6bdcbc3cc339bb6c6517c0c4736a547f
2023-09-07 09:54:01 +10:00
djm@openbsd.org
e19069c9fa
upstream: preserve quoting of Subsystem commands and arguments.
...
This may change behaviour of exotic configurations, but the most common
subsystem configuration (sftp-server) is unlikely to be affected.
OpenBSD-Commit-ID: 8ffa296aeca981de5b0945242ce75aa6dee479bf
2023-09-07 09:54:01 +10:00
djm@openbsd.org
52dfe3c72d
upstream: downgrade duplicate Subsystem directives from being a
...
fatal error to being a debug message to match behaviour with just about all
other directives.
OpenBSD-Commit-ID: fc90ed2cc0c18d4eb8e33d2c5e98d25f282588ce
2023-09-07 09:54:00 +10:00
