New upstream release (8.2p1)

1 files changed, 8 insertions, 6 deletions

diff --git a/auth.c b/auth.c
index fc0c05bae..aed3c13ac 100644
--- a/auth.c
+++ b/auth.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: auth.c,v 1.141 2019/10/02 00:42:30 djm Exp $ */
+/* $OpenBSD: auth.c,v 1.146 2020/01/31 22:42:45 djm Exp $ */
 /*
  * Copyright (c) 2000 Markus Friedl.  All rights reserved.
  *
@@ -79,6 +79,7 @@
 
 /* import */
 extern ServerOptions options;
+extern struct include_list includes;
 extern int use_privsep;
 extern struct sshbuf *loginmsg;
 extern struct passwd *privsep_pw;
@@ -489,7 +490,7 @@ check_key_in_hostfiles(struct passwd *pw, struct sshkey *key, const char *host,
         host_status = check_key_in_hostkeys(hostkeys, key, &found);
         if (host_status == HOST_REVOKED)
                 error("WARNING: revoked key for %s attempted authentication",
-                    found->host);
+                    host);
         else if (host_status == HOST_OK)
                 debug("%s: key for %s found at %s:%ld", __func__,
                     found->host, found->file, found->line);
@@ -571,7 +572,7 @@ getpwnamallow(struct ssh *ssh, const char *user)
 
         ci = get_connection_info(ssh, 1, options.use_dns);
         ci->user = user;
-        parse_server_match_config(&options, ci);
+        parse_server_match_config(&options, &includes, ci);
         log_change_level(options.log_level);
         process_permitopen(ssh, &options);
 
@@ -828,7 +829,7 @@ subprocess(const char *tag, struct passwd *pw, const char *command,
                         child_set_env(&child_env, &envsize, "LANG", cp);
 
                 for (i = 0; i < NSIG; i++)
-                        signal(i, SIG_DFL);
+                        ssh_signal(i, SIG_DFL);
 
                 if ((devnull = open(_PATH_DEVNULL, O_RDWR)) == -1) {
                         error("%s: open %s: %s", tag, _PATH_DEVNULL,
@@ -912,7 +913,7 @@ auth_log_authopts(const char *loc, const struct sshauthopt *opts, int do_remote)
 
         snprintf(buf, sizeof(buf), "%d", opts->force_tun_device);
         /* Try to keep this alphabetically sorted */
-        snprintf(msg, sizeof(msg), "key options:%s%s%s%s%s%s%s%s%s%s%s%s%s",
+        snprintf(msg, sizeof(msg), "key options:%s%s%s%s%s%s%s%s%s%s%s%s%s%s",
             opts->permit_agent_forwarding_flag ? " agent-forwarding" : "",
             opts->force_command == NULL ? "" : " command",
             do_env ?  " environment" : "",
@@ -925,7 +926,8 @@ auth_log_authopts(const char *loc, const struct sshauthopt *opts, int do_remote)
             opts->force_tun_device == -1 ? "" : " tun=",
             opts->force_tun_device == -1 ? "" : buf,
             opts->permit_user_rc ? " user-rc" : "",
-            opts->permit_x11_forwarding_flag ? " x11-forwarding" : "");
+            opts->permit_x11_forwarding_flag ? " x11-forwarding" : "",
+            opts->no_require_user_presence ? " no-touch-required" : "");
 
         debug("%s: %s", loc, msg);
         if (do_remote)