[sshd.c]
     generate a fake session id, too
This commit is contained in:
Ben Lindstrom 2001-03-05 06:25:23 +00:00
parent 4030442d77
commit 941ac82e16
2 changed files with 7 additions and 2 deletions

View File

@ -82,6 +82,9 @@
- deraadt@cvs.openbsd.org 2001/02/28 17:52:54
[misc.c]
for completeness, copy pw_gecos too
- markus@cvs.openbsd.org 2001/02/28 21:21:41
[sshd.c]
generate a fake session id, too
20010304
- (bal) Remove make-ssh-known-hosts.1 since it's no longer valid.
@ -4274,4 +4277,4 @@
- Wrote replacements for strlcpy and mkdtemp
- Released 1.0pre1
$Id: ChangeLog,v 1.875 2001/03/05 06:22:01 mouring Exp $
$Id: ChangeLog,v 1.876 2001/03/05 06:25:23 mouring Exp $

4
sshd.c
View File

@ -40,7 +40,7 @@
*/
#include "includes.h"
RCSID("$OpenBSD: sshd.c,v 1.169 2001/02/23 18:15:13 markus Exp $");
RCSID("$OpenBSD: sshd.c,v 1.170 2001/02/28 21:21:41 markus Exp $");
#include <openssl/dh.h>
#include <openssl/bn.h>
@ -1397,6 +1397,8 @@ do_ssh1_kex(void)
MD5_Final(session_key + 16, &md);
memset(buf, 0, bytes);
xfree(buf);
for (i = 0; i < 16; i++)
session_id[i] = session_key[i] ^ session_key[i + 16];
}
/* Destroy the private and public keys. They will no longer be needed. */
destroy_sensitive_data();