RepoMirrors
/
openssh
mirror of git://anongit.mindrot.org/openssh.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

upstream: some extra paranoia, reminded by jsg@ 

OpenBSD-Commit-ID: 22072bfa1df1391858ae7768a6c627e08593a91e
This commit is contained in:
djm@openbsd.org 2024-09-24 02:28:17 +00:00 committed by Damien Miller
parent 815a94e86a
commit 9517cc5857
No known key found for this signature in database
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
ssh-agent.c
View File

@ -1,4 +1,4 @@
/* $OpenBSD: ssh-agent.c,v 1.306 2024/03/09 05:12:13 djm Exp $ */ /* $OpenBSD: ssh-agent.c,v 1.307 2024/09/24 02:28:17 djm Exp $ */
/* /*
* Author: Tatu Ylonen <ylo@cs.hut.fi> * Author: Tatu Ylonen <ylo@cs.hut.fi>
* Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
@ -1703,6 +1703,10 @@ process_ext_session_bind(SocketEntry *e)
error_fr(r, "parse"); error_fr(r, "parse");
goto out; goto out;
} }
if (sshbuf_len(sid) > AGENT_MAX_SID_LEN) {
error_f("session ID too long");
goto out;
}
if ((fp = sshkey_fingerprint(key, SSH_FP_HASH_DEFAULT, if ((fp = sshkey_fingerprint(key, SSH_FP_HASH_DEFAULT,
SSH_FP_DEFAULT)) == NULL) SSH_FP_DEFAULT)) == NULL)
fatal_f("fingerprint failed"); fatal_f("fingerprint failed");