diff options
-rw-r--r-- | ChangeLog | 6 | ||||
-rw-r--r-- | ssh-agent.c | 3 |
2 files changed, 8 insertions, 1 deletions
@@ -3,6 +3,12 @@ | |||
3 | - millert@cvs.openbsd.org 2014/07/24 22:57:10 | 3 | - millert@cvs.openbsd.org 2014/07/24 22:57:10 |
4 | [ssh.1] | 4 | [ssh.1] |
5 | Mention UNIX-domain socket forwarding too. OK jmc@ deraadt@ | 5 | Mention UNIX-domain socket forwarding too. OK jmc@ deraadt@ |
6 | - dtucker@cvs.openbsd.org 2014/07/25 21:22:03 | ||
7 | [ssh-agent.c] | ||
8 | Clear buffer used for handling messages. This prevents keys being | ||
9 | left in memory after they have been expired or deleted in some cases | ||
10 | (but note that ssh-agent is setgid so you would still need root to | ||
11 | access them). Pointed out by Kevin Burns, ok deraadt | ||
6 | 12 | ||
7 | 20140725 | 13 | 20140725 |
8 | - (djm) [regress/multiplex.sh] restore incorrectly deleted line; | 14 | - (djm) [regress/multiplex.sh] restore incorrectly deleted line; |
diff --git a/ssh-agent.c b/ssh-agent.c index e20a64ecf..25f10c549 100644 --- a/ssh-agent.c +++ b/ssh-agent.c | |||
@@ -1,4 +1,4 @@ | |||
1 | /* $OpenBSD: ssh-agent.c,v 1.189 2014/07/18 02:46:01 djm Exp $ */ | 1 | /* $OpenBSD: ssh-agent.c,v 1.190 2014/07/25 21:22:03 dtucker Exp $ */ |
2 | /* | 2 | /* |
3 | * Author: Tatu Ylonen <ylo@cs.hut.fi> | 3 | * Author: Tatu Ylonen <ylo@cs.hut.fi> |
4 | * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland | 4 | * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland |
@@ -968,6 +968,7 @@ after_select(fd_set *readset, fd_set *writeset) | |||
968 | break; | 968 | break; |
969 | } | 969 | } |
970 | buffer_append(&sockets[i].input, buf, len); | 970 | buffer_append(&sockets[i].input, buf, len); |
971 | explicit_bzero(buf, sizeof(buf)); | ||
971 | process_message(&sockets[i]); | 972 | process_message(&sockets[i]); |
972 | } | 973 | } |
973 | break; | 974 | break; |