- deraadt@cvs.openbsd.org 2001/03/10 15:31:00

     [compat.c compat.h sshconnect.c]
     all known netscreen ssh versions, and older versions of OSU ssh cannot
     handle password padding (newer OSU is fixed)

1 files changed, 5 insertions, 1 deletions

diff --git a/sshconnect.c b/sshconnect.c
index 9962d49bd..573ae76b1 100644
--- a/sshconnect.c
+++ b/sshconnect.c
@@ -13,7 +13,7 @@
  */
 
 #include "includes.h"
-RCSID("$OpenBSD: sshconnect.c,v 1.98 2001/03/04 17:42:28 millert Exp $");
+RCSID("$OpenBSD: sshconnect.c,v 1.99 2001/03/10 15:31:00 deraadt Exp $");
 
 #include <openssl/bn.h>
 
@@ -777,6 +777,10 @@ ssh_put_password(char *password)
         int size;
         char *padded;
 
+        if (datafellows & SSH_BUG_PASSWORDPAD) {
+                packet_put_string(password, strlen(password));
+                return;
+        }
         size = roundup(strlen(password) + 1, 32);
         padded = xmalloc(size);
         memset(padded, 0, size);