* New upstream release (http://www.openssh.com/txt/release-6.3).

  - sftp(1): add support for resuming partial downloads using the "reget"
    command and on the sftp commandline or on the "get" commandline using
    the "-a" (append) option (closes: #158590).
  - ssh(1): add an "IgnoreUnknown" configuration option to selectively
    suppress errors arising from unknown configuration directives (closes:
    #436052).
  - sftp(1): update progressmeter when data is acknowledged, not when it's
    sent (partially addresses #708372).
  - ssh(1): do not fatally exit when attempting to cleanup multiplexing-
    created channels that are incompletely opened (closes: #651357).

1 files changed, 4 insertions, 4 deletions

diff --git a/kexdhc.c b/kexdhc.c
index 76ceb5dd8..ccd137cac 100644
--- a/kexdhc.c
+++ b/kexdhc.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: kexdhc.c,v 1.12 2010/11/10 01:33:07 djm Exp $ */
+/* $OpenBSD: kexdhc.c,v 1.13 2013/05/17 00:13:13 djm Exp $ */
 /*
  * Copyright (c) 2001 Markus Friedl.  All rights reserved.
  *
@@ -125,7 +125,7 @@ kexdh_client(Kex *kex)
         if (BN_bin2bn(kbuf, kout, shared_secret) == NULL)
                 fatal("kexdh_client: BN_bin2bn failed");
         memset(kbuf, 0, klen);
-        xfree(kbuf);
+        free(kbuf);
 
         /* calc and verify H */
         kex_dh_hash(
@@ -139,14 +139,14 @@ kexdh_client(Kex *kex)
             shared_secret,
             &hash, &hashlen
         );
-        xfree(server_host_key_blob);
+        free(server_host_key_blob);
         BN_clear_free(dh_server_pub);
         DH_free(dh);
 
         if (key_verify(server_host_key, signature, slen, hash, hashlen) != 1)
                 fatal("key_verify failed for server_host_key");
         key_free(server_host_key);
-        xfree(signature);
+        free(signature);
 
         /* save session id */
         if (kex->session_id == NULL) {