Age | Commit message (Collapse) | Author | |
---|---|---|---|
2014-01-18 | - (dtucker) [configure.ac] On Cygwin the getopt variables (like optargs, | Darren Tucker | |
optind) are defined in getopt.h already. Unfortunately they are defined as "declspec(dllimport)" for historical reasons, because the GNU linker didn't allow auto-import on PE/COFF targets way back when. The problem is the dllexport attributes collide with the definitions in the various source files in OpenSSH, which obviousy define the variables without declspec(dllimport). The least intrusive way to get rid of these warnings is to disable warnings for GCC compiler attributes when building on Cygwin. Patch from vinschen at redhat.com. | |||
2014-01-17 | - (dtucker) [configure.ac] Have --without-toolchain-hardening not turn off | Darren Tucker | |
stack-protector since that has a separate flag that's been around a while. | |||
2014-01-17 | - (dtucker) [configure.ac] Also look in inttypes.h for uintXX_t types. | Darren Tucker | |
2014-01-17 | - (dtucker) [configure.ac openbsd-compat/bsd-statvfs.c | Darren Tucker | |
openbsd-compat/bsd-statvfs.h] Implement enough of statvfs on top of statfs to be useful (and for the regression tests to pass) on platforms that have statfs and fstatfs. ok djm@ | |||
2014-01-17 | - (dtucker) [configure.ac digest.c openbsd-compat/openssl-compat.c | Darren Tucker | |
openbsd-compat/openssl-compat.h] Add compatibility layer for older openssl versions. ok djm@ | |||
2014-01-17 | - (djm) [Makefile.in configure.ac sandbox-capsicum.c sandbox-darwin.c] | Damien Miller | |
[sandbox-null.c sandbox-rlimit.c sandbox-seccomp-filter.c] [sandbox-systrace.c ssh-sandbox.h sshd.c] Support preauth sandboxing using the Capsicum API introduced in FreeBSD 10. Patch by Dag-Erling Smorgrav, updated by Loganaden Velvindron @ AfriNIC; ok dtucker@ | |||
2014-01-17 | - (dtucker) [configure.ac] Split AC_CHECK_FUNCS for OpenSSL functions into | Darren Tucker | |
separate lines and alphabetize for easier diffing of changes. | |||
2014-01-17 | - (dtucker) [aclocal.m4 configure.ac] Add some additional compiler/toolchain | Darren Tucker | |
hardening flags including -fstack-protector-strong. These default to on if the toolchain supports them, but there is a configure-time knob (--without-hardening) to disable them if necessary. ok djm@ | |||
2013-12-19 | - (dtucker) [configure.ac] bz#2178: Don't try to use BSM on Solaris versions | Darren Tucker | |
greater than 11 either rather than just 11. Patch from Tomas Kuthan. | |||
2013-12-07 | - [configure.ac openbsd-compat/Makefile.in openbsd-compat/bcrypt_pbkdf.c] | Damien Miller | |
[openbsd-compat/blf.h openbsd-compat/blowfish.c] [openbsd-compat/openbsd-compat.h] Start at supporting bcrypt_pbkdf in portable. | |||
2013-12-07 | - [Makefile.in] Add ed25519 sources | Damien Miller | |
2013-12-05 | - (dtucker) [configure.ac] bz#2173: use pkg-config --libs to include correct | Darren Tucker | |
-L location for libedit. Patch from Serge van den Boom. | |||
2013-11-09 | - (dtucker) [configure.ac] Add missing "test". | Darren Tucker | |
2013-11-09 | - (dtucker) [configure.ac] Fix brackets in NID_secp521r1 test. | Darren Tucker | |
2013-11-09 | - (dtucker) [configure.ac kex.c key.c myproposal.h] Test for the presence of | Darren Tucker | |
NID_X9_62_prime256v1, NID_secp384r1 and NID_secp521r1 and test that the latter actually works before using it. Fedora (at least) has NID_secp521r1 that doesn't work (see https://bugzilla.redhat.com/show_bug.cgi?id=1021897). | |||
2013-11-09 | - (dtucker) [Makefile.in configure.ac] Set MALLOC_OPTIONS per platform | Darren Tucker | |
and pass in TEST_ENV. Unknown options cause stderr to get polluted and the stderr-data test to fail. | |||
2013-11-07 | - (dtucker) [Makefile.in configure.ac] Remove TEST_SSH_SHA256 environment | Darren Tucker | |
variable. It's no longer used now that we get the supported MACs from ssh -Q. | |||
2013-11-07 | - (djm) [configure.ac defines.h] Skip arc4random_stir() calls on platforms | Damien Miller | |
that lack it but have arc4random_uniform() | |||
2013-11-03 | - (dtucker) [configure.ac defines.h] Add typedefs for intmax_t and uintmax_t | Darren Tucker | |
for platforms that don't have them. | |||
2013-08-04 | - (dtucker) [auth-krb5.c configure.ac openbsd-compat/bsd-misc.h] Add support | Darren Tucker | |
for building with older Heimdal versions. ok djm. | |||
2013-06-11 | - (dtucker) [Makefile.in configure.ac fixalgorithms] Remove unsupported | Darren Tucker | |
algorithms (Ciphers, MACs and HostKeyAlgorithms) from man pages. | |||
2013-06-06 | - (dtucker) [configure.ac sftp.c openbsd-compat/openbsd-compat.h] Cater for | Darren Tucker | |
platforms that don't have multibyte character support (specifically, mblen). | |||
2013-06-04 | - (dtucker) [configure.ac] Some other platforms need sys/types.h before | Darren Tucker | |
sys/socket.h. | |||
2013-06-03 | - (dtucker) [configure.ac] Some platforms need sys/types.h before sys/un.h. | Darren Tucker | |
2013-06-02 | - (tim) [configure.ac regress/Makefile] With rev 1.47 of test-exec.sh we | Tim Rice | |
need a shell that can handle "[ file1 -nt file2 ]". Rather than keep dealing with shell portability issues in regression tests, we let configure find us a capable shell on those platforms with an old /bin/sh. | |||
2013-06-03 | - (dtucker) [configure.ac] bz#2111: don't try to use lastlog on Android. | Darren Tucker | |
Patch from Nathan Osman. | |||
2013-06-03 | - (dtucker) [configure.ac] sys/un.h needs sys/socket.h on some platforms | Darren Tucker | |
to prevent noise from configure. Patch from Nathan Osman. | |||
2013-06-02 | - (dtucker) [configure.ac misc.c] Look for clock_gettime in librt and fall | Darren Tucker | |
back to time(NULL) if we can't find it anywhere. | |||
2013-06-02 | - (dtucker) [configure.ac defines.h] Test for fd_mask, howmany and NFDBITS | Darren Tucker | |
rather than trying to enumerate the plaforms that don't have them. Based on a patch from Nathan Osman, with help from tim@. | |||
2013-06-02 | - (dtucker) [configure.ac openbsd-compat/xcrypt.c] bz#2112: fall back to | Darren Tucker | |
using openssl's DES_crpyt function on platorms that don't have a native one, eg Android. Based on a patch from Nathan Osman. | |||
2013-05-30 | - (dtucker) [configure.ac openbsd-compat/bsd-misc.h] bz#2087: Add a null | Darren Tucker | |
implementation of endgrent for platforms that don't have it (eg Android). Loosely based on a patch from Nathan Osman, ok djm | |||
2013-05-16 | - (dtucker) [configure.ac readconf.c servconf.c | Darren Tucker | |
openbsd-compat/openbsd-compat.h] Add compat bits for scan_scaled. | |||
2013-05-10 | - (dtucker) [configure.ac] Add -Werror to the -Qunused-arguments test so | Darren Tucker | |
we don't get a warning on compilers that *don't* support it. Add -Wno-unknown-warning-option. Move both to the start of the list for maximum noise suppression. Tested with gcc 4.6.3, gcc 2.95.4 and clang 2.9. | |||
2013-05-10 | - (dtucker) [configure.ac] Enable -Wsizeof-pointer-memaccess if the compiler | Darren Tucker | |
supports it. Mentioned by Colin Watson in bz#2100, ok djm. | |||
2013-04-23 | - (djm) [auth.c configure.ac misc.c monitor.c monitor_wrap.c] Support | Damien Miller | |
platforms, such as Android, that lack struct passwd.pw_gecos. Report and initial patch from Nathan Osman bz#2086; feedback tim@ ok dtucker@ | |||
2013-04-18 | - (dtucker) [configure.ac] Use -Qunused-arguments to suppress warnings from | Darren Tucker | |
unused argument warnings (in particular, -fno-builtin-memset) from clang. | |||
2013-03-22 | - (dtucker) [configure.ac] Add stdlib.h to zlib check for exit() prototype. | Darren Tucker | |
2013-03-20 | - (djm) [configure.ac log.c scp.c sshconnect2.c openbsd-compat/vis.c] | Damien Miller | |
[openbsd-compat/vis.h] FreeBSD's strnvis isn't compatible with OpenBSD's so mark it as broken. Patch from des AT des.no | |||
2013-03-16 | - (tim) [configure.ac] OpenServer 5 wants lastlog even though it has none | Tim Rice | |
of the bits the configure test looks for. | |||
2013-03-15 | - (djm) [configure.ac openbsd-compat/bsd-misc.c openbsd-compat/bsd-misc.h] | Damien Miller | |
Add a usleep replacement for platforms that lack it; ok dtucker | |||
2013-03-15 | - (djm) [configure.ac] Disable utmp, wtmp and/or lastlog if the platform | Damien Miller | |
is unable to successfully compile them. Based on patch from des AT des.no | |||
2013-03-12 | - (dtucker) [auth.c configure.ac platform.c platform.h] Accept uid 2 ("bin") | Darren Tucker | |
in addition to root as an owner of system directories on AIX and HP-UX. ok djm@ | |||
2013-03-08 | - (djm) [configure.ac] Add a timeout to the select/rlimit test to give it a | Damien Miller | |
chance to complete on broken systems; ok dtucker@ | |||
2013-03-06 | - (dtucker) [configure.ac] test that we can set number of file descriptors | Darren Tucker | |
to zero with setrlimit before enabling the rlimit sandbox. This affects (at least) HPUX 11.11. | |||
2013-03-05 | - (dtucker) [configure.ac] use "=" for shell test and not "==". Spotted by | Darren Tucker | |
Kevin Brott. | |||
2013-02-25 | - (dtucker) [configure.ac ssh-gss.h] bz#2073: additional #includes needed | Darren Tucker | |
to use Solaris native GSS libs. Patch from Pierre Ossman. | |||
2013-02-23 | - (djm) [configure.ac includes.h loginrec.c mux.c sftp.c] Prefer | Damien Miller | |
bsd/libutil.h to libutil.h to avoid deprecation warnings on Ubuntu. ok tim | |||
2013-02-22 | - (djm) [configure.ac sandbox-seccomp-filter.c] Support for Linux | Damien Miller | |
seccomp-bpf sandbox on ARM. Patch from shawnlandden AT gmail.com; ok dtucker | |||
2013-02-22 | - (dtucker) [configure.ac] bz#2073: look for Solaris' differently-named | Darren Tucker | |
libgss too. Patch from Pierre Ossman, ok djm. | |||
2013-02-22 | - (dtucker) [Makefile.in configure.ac] bz#2072: don't link krb5 libs to | Darren Tucker | |
ssh(1) since they're not needed. Patch from Pierre Ossman. |