summaryrefslogtreecommitdiff
path: root/dh.c
diff options
context:
space:
mode:
authorDarren Tucker <dtucker@zip.com.au>2004-02-29 20:12:33 +1100
committerDarren Tucker <dtucker@zip.com.au>2004-02-29 20:12:33 +1100
commitfc113c97a3935896869e8bccf7a70cb7c7ed95d3 (patch)
tree260ef3c0aa8256344bbc74a04dec593189507be3 /dh.c
parentd592048c36ee15cef19d6177aeb015b69bfa8833 (diff)
- dtucker@cvs.openbsd.org 2004/02/27 22:42:47
[dh.c] Prevent sshd from sending DH groups with a primitive generator of zero or one, even if they are listed in /etc/moduli. ok markus@
Diffstat (limited to 'dh.c')
-rw-r--r--dh.c5
1 files changed, 4 insertions, 1 deletions
diff --git a/dh.c b/dh.c
index c7a3e18be..b58b8bc28 100644
--- a/dh.c
+++ b/dh.c
@@ -23,7 +23,7 @@
23 */ 23 */
24 24
25#include "includes.h" 25#include "includes.h"
26RCSID("$OpenBSD: dh.c,v 1.26 2003/12/16 15:51:54 markus Exp $"); 26RCSID("$OpenBSD: dh.c,v 1.27 2004/02/27 22:42:47 dtucker Exp $");
27 27
28#include "xmalloc.h" 28#include "xmalloc.h"
29 29
@@ -91,6 +91,9 @@ parse_prime(int linenum, char *line, struct dhgroup *dhg)
91 if (BN_num_bits(dhg->p) != dhg->size) 91 if (BN_num_bits(dhg->p) != dhg->size)
92 goto failclean; 92 goto failclean;
93 93
94 if (BN_is_zero(dhg->g) || BN_is_one(dhg->g))
95 goto failclean;
96
94 return (1); 97 return (1);
95 98
96 failclean: 99 failclean: