RepoMirrors/openssh
1
0
Fork 0
mirror of git://anongit.mindrot.org/openssh.git synced 2024-12-26 20:02:13 +00:00
Code Issues Packages Projects Releases Wiki Activity
5,841 Commits 69 Branches 0 Tags 27 MiB
535b5e1721
Commit Graph

465 Commits

Author SHA1 Message Date
Darren Tucker
1bf3503c9d - (dtucker) [auth-krb5.c platform.{c,h} openbsd-compat/port-aix.{c,h}] 
Bug #1583: Use system's kerberos principal name on AIX if it's available.
   Based on a patch from and tested by Miguel Sanders.
 2009-12-21 10:49:21 +11:00
Darren Tucker
c8802aac28 - (dtucker) Bug #1470: Disable OOM-killing of the listening sshd on Linux, 
based on a patch from Vaclav Ovsik and Colin Watson.  ok djm.
 2009-12-08 13:39:48 +11:00
Darren Tucker
4d6656b103 - (dtucker) [session.c openbsd-compat/port-linux.{c,h}] Bug #1637: if selinux 
is enabled set the security context to "sftpd_t" before running the
   internal sftp server   Based on a patch from jchadima at redhat.
 2009-10-24 15:04:12 +11:00
Darren Tucker
82edf23fff - (dtucker) [session.c openbsd-compat/port-aix.h] Bugs #1249 and #1567: move 
the setpcred call on AIX to immediately before the permanently_set_uid().
   Ensures that we still have privileges when we call chroot and
   pam_open_sesson.  Based on a patch from David Leonard.
 2009-08-20 16:20:50 +10:00
Darren Tucker
b5d5ee1ab0 - (dtucker) [sshlogin.c openbsd-compat/port-aix.{c,h}] Bug #1595: make 
PrintLastLog work on AIX.  Based in part on a patch from Miguel Sanders.
 2009-08-17 09:40:00 +10:00
Darren Tucker
440089afe0 - (dtucker) [openbsd-compat/getrrsetbyname.c] Reduce answer buffer size so it 
fits into 16 bits to work around a bug in glibc's resolver where it masks
   off the buffer size at 16 bits.  Patch from Hauke Lampe, ok djm jakob.
 2009-07-13 11:38:23 +10:00
Darren Tucker
9d86e5d570 - (dtucker) [auth-passwd.c auth1.c auth2-kbdint.c auth2-none.c auth2-passwd.c 
auth2-pubkey.c session.c openbsd-compat/bsd-cygwin_util.{c,h}
   openbsd-compat/daemon.c] Remove support for Windows 95/98/ME and very old
   version of Cygwin.  Patch from vinschen at redhat com.
 2009-03-08 11:40:27 +11:00
Darren Tucker
3e7e15f1bd - (dtucker) [configure.ac openbsd-compat/openssl-compat.{c,h}] 
EVP_DigestUpdate does not exactly match the other OLD_EVP functions (eg
   in openssl 0.9.6) so add an explicit test for it.
 2009-03-07 22:22:35 +11:00
Darren Tucker
8aae6ff0d9 - (dtucker) [schnorr.c openbsd-compat/openssl-compat.{c,h}] Add 
EVP_DigestUpdate to the OLD_EVP compatibility functions and tell schnorr.c
   to use them.  Allows building with older OpenSSL versions.
 2009-03-07 12:01:47 +11:00
Damien Miller
3f94aaf38c - (djm) [regress/conch-ciphers.sh regress/putty-ciphers.sh] 
[regress/putty-kex.sh regress/putty-transfer.sh] Downgrade disabled
   interop tests from FATAL error to a warning. Allows some interop
   tests to proceed if others are missing necessary prerequisites.
 2009-02-16 15:21:39 +11:00
Tim Rice
351529ce30 - (tim) [configure.ac defines.h openbsd-compat/port-uw.c 
openbsd-compat/xcrypt.c] Add SECUREWARE support to OpenServer 6 SVR5 ABI.
   OK djm@ dtucker@
 2009-01-07 10:04:12 -08:00
Darren Tucker
661f63b7d2 - (dtucker) [openbsd-compat/bsd-poll.c] correctly check for number of FDs 
larger than FD_SETSIZE (OpenSSH only ever uses poll with one fd).  Patch
   from Nicholas Marriott.
 2008-08-30 07:32:37 +10:00
Darren Tucker
9a3f2b4cc3 - (dtucker) [openbsd-compat/bsd-cygwin_util.c] Remove long-unneeded compat 
code, replace with equivalent cygwin library call.  Patch from vinschen
   at redhat.comi, ok djm@.
 2008-07-17 19:03:49 +10:00
Damien Miller
c4657ef181 - (djm) [openbsd-compat/fake-rfc2553.c openbsd-compat/fake-rfc2553.h] 
return EAI_FAMILY when trying to lookup unsupported address family;
   from vinschen AT redhat.com
 2008-07-14 21:37:36 +10:00
Damien Miller
639ce593d4 - (djm) [openbsd-compat/rresvport.c] Add unistd.h for missing close() 
prototype; reported by cristian.ionescu-idbohrn AT axis.com
 2008-07-14 12:03:27 +10:00
Damien Miller
ce02e5e09e - (djm) [openbsd-compat/bindresvport.c] Rename variables s/sin/in/ to 
avoid clash with sin(3) function; reported by
   cristian.ionescu-idbohrn AT axis.com
 2008-07-14 12:02:24 +10:00
Damien Miller
8b7ab960df - (djm) [openbsd-compat/sigact.c] Avoid NULL derefs in ancient sigaction 
replacement code; patch from ighighi AT gmail.com in bz#1240;
   ok dtucker
 2008-06-15 10:55:34 +10:00
Darren Tucker
f387e59d52 - (dtucker) [openbsd-compat/setenv.c] Make offsets size_t to prevent 
compiler warnings on some platforms.  Based on a discussion with otto@
 2008-06-13 15:03:14 +10:00
Darren Tucker
9d3739daa1 - (dtucker) [openbsd-compat/fake-rfc2553.h] Add sin6_scope_id to sockaddr_in6 
since the new CIDR code in addmatch.c references it.
 2008-06-10 23:52:51 +10:00
Darren Tucker
598eaa6c0c - (dtucker) [configure.ac defines.h sftp-client.c sftp-server.c sftp.c 
openbsd-compat/Makefile.in openbsd-compat/openbsd-compat.h
   openbsd-compat/bsd-statvfs.{c,h}] Add a null implementation of statvfs and
   fstatvfs and remove #defines around statvfs code.  ok djm@
 2008-06-09 03:32:29 +10:00
Damien Miller
58ea61ba2a - (djm) [openbsd-compat/bsd-arc4random.c] Fix math bug that caused bias 
in arc4random_uniform with upper_bound in (2^30,2*31). Note that
   OpenSSH did not make requests with upper bounds in this range.
 2008-06-04 10:54:00 +10:00
Damien Miller
a7058ec7c0 - (djm) [configure.ac mux.c sftp.c openbsd-compat/Makefile.in] 
[openbsd-compat/fmt_scaled.c openbsd-compat/openbsd-compat.h]
   Fix compilation on Linux, including pulling in fmt_scaled(3)
   implementation from OpenBSD's libutil.
 2008-05-20 08:57:06 +10:00
Damien Miller
9417831ece - (djm) [openbsd-compat/port-tun.c] needs sys/queue.h 2008-05-19 15:28:35 +10:00
Damien Miller
caaed01e90 - (djm) [openbsd-compat/bsd-arc4random.c] Warning fixes 2008-05-19 15:26:54 +10:00
Damien Miller
a4be7c23fd - (djm) [openbsd-compat/bsd-arc4random.c openbsd-compat/openbsd-compat.c] 
[configure.ac] Implement arc4random_buf(), import implementation of
     arc4random_uniform() from OpenBSD
 2008-05-19 14:47:37 +10:00
Damien Miller
c5750226af - (djm) Force string arguments to replacement setproctitle() though 
strnvis first. Ok dtucker@
 2008-05-16 10:01:54 +10:00
Damien Miller
55754fb002 - (djm) [openbsd-compat/bsd-poll.c] Include stdlib.h to avoid compile- 
time warnings on LynxOS. Patch from ops AT iki.fi
 2008-04-04 16:16:35 +11:00
Darren Tucker
b8eb586412 - (dtucker) Cache selinux status earlier so we know if it's enabled after a 
chroot.  Allows ChrootDirectory to work with selinux support compiled in
   but not enabled.  Using it with selinux enabled will require some selinux
   support inside the chroot.  "looks sane" djm@
 2008-03-27 07:27:20 +11:00
Darren Tucker
7643e3397d - (dtucker) [openbsd-compat/regress/strtonumtest.c] Bug #1347: Use platform's 
equivalent of LLONG_MAX for the compat regression tests, which makes them
   run on AIX and HP-UX.  Patch from David Leonard.
 2008-03-09 17:10:09 +11:00
Darren Tucker
16ba6a8ea2 - (dtucker) [openbsd-compat/port-aix.{c,h}] Remove AIX specific initgroups 
implementation.  It's not needed to fix bug #1081 and breaks the build
   on some AIX configurations.
 2008-03-09 16:36:55 +11:00
Darren Tucker
7ec8733247 - (dtucker) [openbsd-compat/bsd-poll.c] We don't check for select(2) in 
configure (and there's not much point, as openssh won't work without it)
   so HAVE_SELECT is not defined and the poll(2) compat code doesn't get
   built in.  Remove HAVE_SELECT so we can build on platforms without poll.
 2008-02-29 13:57:47 +11:00
Darren Tucker
0f26b1386a - (dtucker) [configure.ac openbsd-compat/port-aix.{c,h}] Bug #1081: Implement 
getgrouplist via getgrset on AIX, rather than iterating over getgrent.
   This allows, eg, Match and AllowGroups directives to work with NIS and
   LDAP groups.
 2008-02-28 23:16:04 +11:00
Darren Tucker
3d295a6cf0 - (dtucker) [key.c defines.h openbsd-compat/openssl-compat.h] Move old OpenSSL 
compat glue into openssl-compat.h.
 2008-02-28 19:22:04 +11:00
Darren Tucker
bfaaf960a0 - (dtucker) [includes.h ssh-add.c ssh-agent.c ssh-keygen.c ssh.c sshd.c 
openbsd-compat/openssl-compat.{c,h}] Bug #1437 Move the OpenSSL compat
   header to after OpenSSL headers, since some versions of OpenSSL have
   SSLeay_add_all_algorithms as a macro already.
 2008-02-28 19:13:52 +11:00
Darren Tucker
935e20a3f0 - (dtucker) [includes.h openbsd-compat/openssl-compat.c] Bug #1437: reshuffle 
headers so ./configure --with-ssl-engine actually works.  Patch from
   Ian Lister.
 2008-02-25 21:13:47 +11:00
Darren Tucker
2c2ac033c1 - (dtucker) [openbsd-compat/fake-rfc2553.h] rename ssh_gai_strerror hack 
since it now conflicts with the helper function in misc.c.  From
   vinschen AT redhat.com.
 2008-02-25 20:21:20 +11:00
Darren Tucker
528d6fa10a - (dtucker) [configure.ac openbsd-compat/glob.{c,h}] Bug #1407: force use of 
builtin glob implementation on Mac OS X.  Based on a patch from
   vgiffin at apple.
 2007-12-31 21:29:26 +11:00
Damien Miller
e6d1527949 - djm@cvs.openbsd.org 2007/10/29 23:49:41 
[openbsd-compat/sys-tree.h]
     remove extra backslash at the end of RB_PROTOTYPE, report from
     Jan.Pechanec AT Sun.COM; ok deraadt@
 2007-10-30 10:52:44 +11:00
Damien Miller
0ff80a1b17 - millert@cvs.openbsd.org 2004/10/07 16:56:11 
GLOB_NOESCAPE is POSIX so move it out of the #ifndef _POSIX_SOURCE
     block.
     (NB. mostly an RCS ID sync, as portable strips out the conditionals)
 2007-10-26 16:48:13 +10:00
Damien Miller
a95c0c224b - otto@cvs.openbsd.org 2007/04/30 18:42:34 
[openbsd-compat/sys-queue.h]
     Enable QUEUE_MACRO_DEBUG on DIAGNOSTIC kernels.
     Input and okays from krw@, millert@, otto@, deraadt@, miod@.
 2007-10-26 16:46:31 +10:00
Damien Miller
03c618afa3 - otto@cvs.openbsd.org 2005/11/25 08:06:25 
[openbsd-compat/sys-queue.h]
     Introduce debugging aid for queue macros. Disabled by default; but
     developers are encouraged to run with this enabled.
     ok krw@ fgsch@ deraadt@
 2007-10-26 16:45:32 +10:00
Damien Miller
300f95fccb - otto@cvs.openbsd.org 2005/10/25 06:37:47 
[openbsd-compat/sys-queue.h]
     Some uvm problem is being exposed with the more strict macros.
     Revert until we've found out what's causing the panics.
 2007-10-26 16:44:27 +10:00
Damien Miller
0b6a21d468 - otto@cvs.openbsd.org 2005/10/24 20:25:14 
[openbsd-compat/sys-queue.h]
     Partly backout. NOLIST, used in LISTs is probably interfering.
     requested by deraadt@
 2007-10-26 16:43:22 +10:00
Damien Miller
9aeef6b50d - otto@cvs.openbsd.org 2005/10/17 20:19:42 
[openbsd-compat/sys-queue.h]
     Performing certain operations on queue.h data structurs produced
     funny results.  An example is calling  LIST_REMOVE on the same
     element twice. This will not fail, but result in a data structure
     referencing who knows what. Prevent these accidents by NULLing some
     fields on remove and replace. This way, either a panic or segfault
     will be produced on the faulty operation.
 2007-10-26 16:42:18 +10:00
Damien Miller
d129ecb0f9 - deraadt@cvs.openbsd.org 2005/02/25 13:29:30 
[openbsd-compat/sys-queue.h]
     minor white spacing
 2007-10-26 16:41:14 +10:00
Damien Miller
b99f5f714b - grange@cvs.openbsd.org 2004/05/04 16:59:32 
[openbsd-compat/sys-queue.h]
     Remove useless ``elm'' argument from the SIMPLEQ_REMOVE_HEAD macro.
     This matches our SLIST behaviour and NetBSD's SIMPLEQ as well.
     ok millert krw deraadt
 2007-10-26 16:40:20 +10:00
Damien Miller
0afeae426c - tdeval@cvs.openbsd.org 2004/11/24 18:10:42 
[openbsd-compat/sys-tree.h]
     typo
 2007-10-26 16:39:05 +10:00
Damien Miller
88aa4e3d61 - frantzen@@cvs.openbsd.org 2004/04/24 18:11:46 
[openbsd-compat/tree.h]
     sync to Niels Provos' version.  avoid unused variable warning in
     RB_NEXT()
 2007-10-26 16:37:43 +10:00
Damien Miller
2f715eeb5c - jakob@cvs.openbsd.org 2007/10/11 18:36:41 
[openbsd-compat/getrrsetbyname.c openbsd-compat/getrrsetbyname.h]
     use RRSIG instead of SIG for DNSSEC. ok djm@
 2007-10-26 16:26:46 +10:00
Damien Miller
1651f6c40e - otto@cvs.openbsd.org 2006/10/21 09:55:03 
[openbsd-compat/base64.c]
     remove calls to abort(3) that can't happen anyway; from
     <bret dot lambert at gmail.com>; ok millert@ deraadt@
 2007-10-26 16:17:24 +10:00