summaryrefslogtreecommitdiff
path: root/ChangeLog
AgeCommit message (Collapse)Author
2008-01-20 - (djm) Silence noice from expr in ssh-copy-id; patch fromDamien Miller
mikel AT mikelward.com
2008-01-02 - (dtucker) [configure.ac] Fix message for -fstack-protector-all test.Darren Tucker
2008-01-02 - dtucker@cvs.openbsd.org 2008/01/01 08:51:20Darren Tucker
[moduli] Updated moduli file; ok djm@
2008-01-01 - dtucker@cvs.openbsd.org 2008/01/01 09:27:33Darren Tucker
[sshd_config.5 servconf.c] Allow PermitRootLogin in a Match block. Allows for, eg, permitting root only from the local network. ok markus@, man page bit ok jmc@
2008-01-01Add missing ChangeLog entriesDarren Tucker
2008-01-01 - dtucker@cvs.openbsd.org 2007/12/31 15:27:04Darren Tucker
[sshd.c] When in inetd mode, have sshd generate a Protocol 1 ephemeral server key only for connections where the client chooses Protocol 1 as opposed to when it's enabled in the server's config. Speeds up Protocol 2 connections to inetd-mode servers that also allow Protocol 1. bz #440, based on a patch from bruno at wolff.to, ok markus@
2008-01-01 - (dtucker) OpenBSD CVS SyncDarren Tucker
- dtucker@cvs.openbsd.org 2007/12/31 10:41:31 [readconf.c servconf.c] Prevent strict-aliasing warnings on newer gcc versions. bz #1355, patch from Dmitry V. Levin, ok djm@
2007-12-31 - (dtucker) [configure.ac openbsd-compat/glob.{c,h}] Bug #1407: force use ofDarren Tucker
builtin glob implementation on Mac OS X. Based on a patch from vgiffin at apple.
2007-12-29 - dtucker@cvs.openbsd.org 2007/12/28 22:34:47Darren Tucker
[clientloop.c] Use the correct packet maximum sizes for remote port and agent forwarding. Prevents the server from killing the connection if too much data is queued and an excessively large packet gets sent. bz #1360, ok djm@.
2007-12-29 - dtucker@cvs.openbsd.org 2007/12/28 15:32:24Darren Tucker
[clientloop.c serverloop.c packet.c] Make SSH2_MSG_UNIMPLEMENTED and SSH2_MSG_IGNORE messages reset the ServerAlive and ClientAlive timers. Prevents dropping a connection when these are enabled but the peer does not support our keepalives. bz #1307, ok djm@.
2007-12-29 - dtucker@cvs.openbsd.org 2007/12/27 14:22:08Darren Tucker
[servconf.c canohost.c misc.c channels.c sshconnect.c misc.h ssh-keyscan.c sshd.c] Add a small helper function to consistently handle the EAI_SYSTEM error code of getaddrinfo. Prompted by vgiffin at apple com via bz #1417. ok markus@ stevesk@
2007-12-29 - djm@cvs.openbsd.org 2007/12/12 05:04:03Darren Tucker
[sftp.c] unbreak lls command and add a regress test that would have caught the breakage; spotted by mouring@
2007-12-02 - deraadt@cvs.openbsd.org 2007/11/03 02:03:49Darren Tucker
[ssh.c] avoid errno trashing in signal handler; ok dtucker
2007-12-02 - dtucker@cvs.openbsd.org 2007/11/03 02:00:32Darren Tucker
[ssh.c] Use xstrdup/xfree when saving pwname and pwdir; ok deraadt@
2007-12-02 - deraadt@cvs.openbsd.org 2007/11/03 01:24:06Darren Tucker
[ssh.c] bz #1377: getpwuid results were being clobbered by another getpw* call inside tilde_expand_filename(); save the data we need carefully ok djm
2007-12-02 - djm@cvs.openbsd.org 2007/11/03 00:36:14Darren Tucker
[clientloop.c] fix memory leak in process_cmdline(), patch from Jan.Pechanec AT Sun.COM; ok dtucker@
2007-12-02 - jmc@cvs.openbsd.org 2007/10/29 07:48:19Darren Tucker
[ssh_config.5] clean up after previous macro removal;
2007-12-02 - dtucker@cvs.openbsd.org 2007/10/29 06:54:50Darren Tucker
[ssh.c] Make LocalCommand work for Protocol 1 too; ok djm@
2007-12-02 - dtucker@cvs.openbsd.org 2007/10/29 06:51:59Darren Tucker
[ssh_config.5] ProxyCommand and LocalCommand use the user's shell, not /bin/sh; ok djm@
2007-12-02 - dtucker@cvs.openbsd.org 2007/10/29 04:08:08Darren Tucker
[monitor_wrap.c monitor.c] Send config block back to slave for invalid users too so options set by a Match block (eg Banner) behave the same for non-existent users. Found by and ok djm@
2007-12-02 - dtucker@cvs.openbsd.org 2007/10/29 01:55:04Darren Tucker
[ssh.c] Plug tiny mem leaks in ControlPath and ProxyCommand option processing; ok djm@
2007-12-02 - dtucker@cvs.openbsd.org 2007/10/29 00:52:45Darren Tucker
[auth2-gss.c] Allow build without -DGSSAPI; ok deraadt@ (Id sync only, Portable already has the ifdefs)
2007-12-02 - (dtucker) [scp.c] Update $OpenBSD tag missing from rev 1.175 and removeDarren Tucker
leftover debug code.
2007-12-02 - (dtucker) [configure.ac] Enable -fstack-protector-all on systems whereDarren Tucker
gcc supports it. ok djm@
2007-10-30 - djm@cvs.openbsd.org 2007/10/29 23:49:41Damien Miller
[openbsd-compat/sys-tree.h] remove extra backslash at the end of RB_PROTOTYPE, report from Jan.Pechanec AT Sun.COM; ok deraadt@
2007-10-26 - millert@cvs.openbsd.org 2004/10/07 16:56:11Damien Miller
GLOB_NOESCAPE is POSIX so move it out of the #ifndef _POSIX_SOURCE block. (NB. mostly an RCS ID sync, as portable strips out the conditionals)
2007-10-26 - otto@cvs.openbsd.org 2007/04/30 18:42:34Damien Miller
[openbsd-compat/sys-queue.h] Enable QUEUE_MACRO_DEBUG on DIAGNOSTIC kernels. Input and okays from krw@, millert@, otto@, deraadt@, miod@.
2007-10-26 - otto@cvs.openbsd.org 2005/11/25 08:06:25Damien Miller
[openbsd-compat/sys-queue.h] Introduce debugging aid for queue macros. Disabled by default; but developers are encouraged to run with this enabled. ok krw@ fgsch@ deraadt@
2007-10-26 - otto@cvs.openbsd.org 2005/10/25 06:37:47Damien Miller
[openbsd-compat/sys-queue.h] Some uvm problem is being exposed with the more strict macros. Revert until we've found out what's causing the panics.
2007-10-26 - otto@cvs.openbsd.org 2005/10/24 20:25:14Damien Miller
[openbsd-compat/sys-queue.h] Partly backout. NOLIST, used in LISTs is probably interfering. requested by deraadt@
2007-10-26 - otto@cvs.openbsd.org 2005/10/17 20:19:42Damien Miller
[openbsd-compat/sys-queue.h] Performing certain operations on queue.h data structurs produced funny results. An example is calling LIST_REMOVE on the same element twice. This will not fail, but result in a data structure referencing who knows what. Prevent these accidents by NULLing some fields on remove and replace. This way, either a panic or segfault will be produced on the faulty operation.
2007-10-26 - deraadt@cvs.openbsd.org 2005/02/25 13:29:30Damien Miller
[openbsd-compat/sys-queue.h] minor white spacing
2007-10-26 - grange@cvs.openbsd.org 2004/05/04 16:59:32Damien Miller
[openbsd-compat/sys-queue.h] Remove useless ``elm'' argument from the SIMPLEQ_REMOVE_HEAD macro. This matches our SLIST behaviour and NetBSD's SIMPLEQ as well. ok millert krw deraadt
2007-10-26 - tdeval@cvs.openbsd.org 2004/11/24 18:10:42Damien Miller
[openbsd-compat/sys-tree.h] typo
2007-10-26 - frantzen@@cvs.openbsd.org 2004/04/24 18:11:46Damien Miller
[openbsd-compat/tree.h] sync to Niels Provos' version. avoid unused variable warning in RB_NEXT()
2007-10-26 - jakob@cvs.openbsd.org 2007/10/11 18:36:41Damien Miller
[openbsd-compat/getrrsetbyname.c openbsd-compat/getrrsetbyname.h] use RRSIG instead of SIG for DNSSEC. ok djm@
2007-10-26 - otto@cvs.openbsd.org 2006/10/21 09:55:03Damien Miller
[openbsd-compat/base64.c] remove calls to abort(3) that can't happen anyway; from <bret dot lambert at gmail.com>; ok millert@ deraadt@
2007-10-26 - (djm) [openbsd-compat/bindresvport.c]Damien Miller
Sync RCS ID after irrelevant (for portable OpenSSH) header shuffling
2007-10-26 - jakob@cvs.openbsd.org 2007/10/11 18:36:41Damien Miller
[openbsd-compat/getrrsetbyname.c] use RRSIG instead of SIG for DNSSEC. ok djm@
2007-10-26 - deraadt@cvs.openbsd.org 2005/11/28 17:50:12Damien Miller
[openbsd-compat/glob.c] unused arg in internal static API
2007-10-26 - (djm) [regress/sftp-cmds.sh]Damien Miller
Use more restrictive glob to pick up test files from /bin - some platforms ship broken symlinks there which could spoil the test.
2007-10-26 - djm@cvs.openbsd.org 2007/10/26 05:30:01Damien Miller
[regress/sftp-glob.sh regress/test-exec.sh] remove "echo -E" crap that I added in last commit and use printf(1) for cases where we strictly require echo not to reprocess escape characters.
2007-10-26 - djm@cvs.openbsd.org 2007/10/24 03:32:35Damien Miller
[regress/sftp-cmds.sh regress/sftp-glob.sh regress/test-exec.sh] comprehensive tests for sftp escaping its interaction with globbing; ok dtucker@
2007-10-26 - pvalchev@cvs.openbsd.org 2007/06/07 19:41:46Damien Miller
[regress/cipher-speed.sh regress/try-ciphers.sh] test umac-64@openssh.com ok djm@
2007-10-26 - dtucker@cvs.openbsd.org 2006/12/13 08:36:36Damien Miller
[regress/cfgmatch.sh] Additional test for multiple PermitOpen entries. ok djm@
2007-10-26 - markus@cvs.openbsd.org 2006/11/06 09:27:43Damien Miller
[regress/cfgmatch.sh] fix quoting for non-(c)sh login shells.
2007-10-26 - djm@cvs.openbsd.org 2006/08/29 09:44:00Damien Miller
[regress/sftp-cmds.sh] clean up our mess
2007-10-26 - djm@cvs.openbsd.org 2007/10/24 03:44:02Damien Miller
[scp.c] factor out network read/write into an atomicio()-like function, and use it to handle short reads, apply bandwidth limits and update counters. make network IO non-blocking, so a small trickle of reads/writes has a chance of updating the progress meter; bz #799 ok dtucker@
2007-10-26 - djm@cvs.openbsd.org 2007/10/24 03:30:02Damien Miller
[sftp.c] rework argument splitting and parsing to cope correctly with common shell escapes and make handling of escaped characters consistent with sh(1) and between sftp commands (especially between ones that glob their arguments and ones that don't). parse command flags using getopt(3) rather than hand-rolled parsers. ok dtucker@
2007-10-26 - markus@cvs.openbsd.org 2007/10/22 19:10:24Damien Miller
[readconf.c] make sure that both the local and remote port are correct when parsing -L; Jan Pechanec (bz #1378)