* New upstream release (http://www.openssh.org/txt/release-6.0).

  - Fix IPQoS not being set on non-mapped v4-in-v6 addressed connections
    (closes: #643312, #650512).
  - Add a new privilege separation sandbox implementation for Linux's new
    seccomp sandbox, automatically enabled on platforms that support it.
    (Note: privilege separation sandboxing is still experimental.)

1 files changed, 9 insertions, 5 deletions

diff --git a/scp.c b/scp.c
index 69344b804..c08d122ea 100644
--- a/scp.c
+++ b/scp.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: scp.c,v 1.170 2010/12/09 14:13:33 jmc Exp $ */
+/* $OpenBSD: scp.c,v 1.171 2011/09/09 22:37:01 djm Exp $ */
 /*
  * scp - secure remote copy.  This is basically patched BSD rcp which
  * uses ssh to do the data transfer (instead of using rcmd).
@@ -609,12 +609,14 @@ toremote(char *targ, int argc, char **argv)
                                 host = cleanhostname(argv[i]);
                                 suser = NULL;
                         }
-                        xasprintf(&bp, "%s -f -- %s", cmd, src);
+                        xasprintf(&bp, "%s -f %s%s", cmd,
+                            *src == '-' ? "-- " : "", src);
                         if (do_cmd(host, suser, bp, &remin, &remout) < 0)
                                 exit(1);
                         (void) xfree(bp);
                         host = cleanhostname(thost);
-                        xasprintf(&bp, "%s -t -- %s", cmd, targ);
+                        xasprintf(&bp, "%s -t %s%s", cmd,
+                            *targ == '-' ? "-- " : "", targ);
                         if (do_cmd2(host, tuser, bp, remin, remout) < 0)
                                 exit(1);
                         (void) xfree(bp);
@@ -660,7 +662,8 @@ toremote(char *targ, int argc, char **argv)
                                 errs = 1;
                 } else {        /* local to remote */
                         if (remin == -1) {
-                                xasprintf(&bp, "%s -t -- %s", cmd, targ);
+                                xasprintf(&bp, "%s -t %s%s", cmd,
+                                    *targ == '-' ? "-- " : "", targ);
                                 host = cleanhostname(thost);
                                 if (do_cmd(host, tuser, bp, &remin,
                                     &remout) < 0)
@@ -713,7 +716,8 @@ tolocal(int argc, char **argv)
                                 suser = pwd->pw_name;
                 }
                 host = cleanhostname(host);
-                xasprintf(&bp, "%s -f -- %s", cmd, src);
+                xasprintf(&bp, "%s -f %s%s",
+                    cmd, *src == '-' ? "-- " : "", src);
                 if (do_cmd(host, suser, bp, &remin, &remout) < 0) {
                         (void) xfree(bp);
                         ++errs;