Age | Commit message (Collapse) | Author | |
---|---|---|---|
2011-01-12 | - nicm@cvs.openbsd.org 2010/10/08 21:48:42 | Damien Miller | |
[openbsd-compat/glob.c] Extend GLOB_LIMIT to cover readdir and stat and bump the malloc limit from ARG_MAX to 64K. Fixes glob-using programs (notably ftp) able to be triggered to hit resource limits. Idea from a similar NetBSD change, original problem reported by jasper@. ok millert tedu jasper | |||
2010-12-05 | - (dtucker) openbsd-compat/openssl-compat.c] remove sleep leftover from | Darren Tucker | |
debugging. Spotted by djm. | |||
2010-12-04 | - (dtucker) [configure.ac moduli.c openbsd-compat/openssl-compat.{c,h}] Add | Darren Tucker | |
shims for the new, non-deprecated OpenSSL key generation functions for platforms that don't have the new interfaces. | |||
2010-12-03 | - (djm) [openbsd-compat/bindresvport.c] Use arc4random_uniform(range) | Damien Miller | |
instead of (arc4random() % range) | |||
2010-11-22 | - (dtucker) Bug #1840: fix warning when configuring --with-ssl-engine, patch | Darren Tucker | |
from vapier at gentoo org. | |||
2010-11-08 | - (tim) [configure.ac openbsd-compat/bsd-misc.h openbsd-compat/bsd-misc.c] Add | Tim Rice | |
support for platforms missing isblank(). ok djm@ | |||
2010-11-05 | - (dtucker) [configure.ac platform.{c,h} session.c | Darren Tucker | |
openbsd-compat/port-solaris.{c,h}] Bug #1824: Add Solaris Project support. Patch from cory.erickson at csu mnscu edu with a bit of rework from me. ok djm@ | |||
2010-10-24 | - (tim) [openbsd-compat/glob.h] Remove sys/cdefs.h include that came with | Tim Rice | |
1.12 to unbreak Solaris build. ok djm@ | |||
2010-10-07 | - (djm) [openbsd-compat/Makefile.in] Actually link timingsafe_bcmp | Damien Miller | |
2010-10-07 | - (djm) [openbsd-compat/glob.c] restore ARG_MAX compat code. | Damien Miller | |
2010-10-07 | - djm@cvs.openbsd.org 2010/10/01 23:05:32 | Damien Miller | |
[cipher-3des1.c cipher-bf1.c cipher-ctr.c openbsd-compat/openssl-compat.h] adapt to API changes in openssl-1.0.0a NB. contains compat code to select correct API for older OpenSSL | |||
2010-10-07 | sadly, two typos on one line is not my best record | Damien Miller | |
2010-10-07 | unbreak previous | Damien Miller | |
2010-10-07 | - djm@cvs.openbsd.org 2010/09/25 09:30:16 | Damien Miller | |
[sftp.c configure.ac openbsd-compat/glob.c openbsd-compat/glob.h] make use of new glob(3) GLOB_KEEPSTAT extension to save extra server rountrips to fetch per-file stat(2) information. NB. update openbsd-compat/ glob(3) implementation from OpenBSD libc to match. | |||
2010-10-07 | - matthew@cvs.openbsd.org 2010/09/24 13:33:00 | Damien Miller | |
[misc.c misc.h configure.ac openbsd-compat/openbsd-compat.h] [openbsd-compat/timingsafe_bcmp.c] Add timingsafe_bcmp(3) to libc, mention that it's already in the kernel in kern(9), and remove it from OpenSSH. ok deraadt@, djm@ NB. re-added under openbsd-compat/ for portable OpenSSH | |||
2010-09-10 | - (dtucker) [openbsd-compat/port-linux.c] Check is_selinux_enabled for exact | Darren Tucker | |
return code since it can apparently return -1 under some conditions. From openssh bugs werbittewas de, ok djm@ | |||
2010-08-23 | Import 5.6p1 tarball | Colin Watson | |
2010-08-16 | - (dtucker) [configure.ac openbsd-compat/Makefile.in | Darren Tucker | |
openbsd-compat/openbsd-compat.h openbsd-compat/strptime.c] Add strptime to the compat library which helps on platforms like old IRIX. Based on work by djm, tested by Tom Christensen. | |||
2010-08-10 | - (djm) bz#1561: don't bother setting IFF_UP on tun(4) device if it is | Damien Miller | |
already set. Makes FreeBSD user openable tunnels useful; patch from richard.burakowski+ossh AT mrburak.net, ok dtucker@ | |||
2010-06-26 | - (tim) [openbsd-compat/port-uw.c] Reorder includes. auth-options.h now needs | Tim Rice | |
key.h. | |||
2010-05-12 | - (djm) [openbsd-compat/openssl-compat.h] Fix build breakage on older | Damien Miller | |
libcrypto by defining OPENSSL_[DR]SA_MAX_MODULUS_BITS if they aren't already. ok dtucker@ | |||
2010-04-16 | Import 5.5p1 tarball | Colin Watson | |
2010-03-31 | Import 5.4p1 tarball | Colin Watson | |
2010-03-26 | - (djm) [openbsd-compat/bsd-arc4random.c] Fix preprocessor detection | Damien Miller | |
for arc4random_buf() and arc4random_uniform(); from Josh Gilkerson | |||
2010-03-01 | - (dtucker) [openbsd-compat/port-linux.c] Make failure to write to the OOM | Darren Tucker | |
adjust log at verbose only, since according to cjwatson in bug #1470 some virtualization platforms don't allow writes. | |||
2010-02-28 | - (djm) [openbsd-compat/bsd-cygwin_util.c] Reduce the set of environment | Damien Miller | |
variables copied into sshd child processes. From vinschen AT redhat.com | |||
2010-01-29 | - (dtucker) [openbsd-compat/openssl-compat.c] Bug #1707: Call OPENSSL_config() | Darren Tucker | |
after registering the hardware engines, which causes the openssl.cnf file to be processed. See OpenSSL's man page for OPENSSL_config(3) for details. Patch from Solomon Peachy, ok djm@. | |||
2010-01-24 | Import 5.3p1 tarball | Colin Watson | |
2010-01-16 | - (dtucker) [openbsd-compat/openbsd-compat.h] Typo. | Darren Tucker | |
2010-01-16 | - (dtucker) [openbsd-compat/pwcache.c] Shrink ifdef area to prevent unused | Darren Tucker | |
variable warnings. | |||
2010-01-16 | - (dtucker) [openbsd-compat/openbsd-compat.h] Fix prototypes, spotted by | Darren Tucker | |
Tim. | |||
2010-01-16 | - (dtucker) [openbsd-compat/openbsd-compat.h] Prototypes for user_from_uid | Darren Tucker | |
and group_from_gid. | |||
2010-01-16 | - (dtucker) [openbsd-compat/pwcache.c] Pull in includes.h and thus defines.h | Darren Tucker | |
so we correctly detect whether or not we have a native user_from_uid. | |||
2010-01-15 | - (dtucker) [configure.ac openbsd-compat/{Makefile.in,pwcache.c} Portability | Darren Tucker | |
for pwcache. Also, added caching of negative hits. | |||
2010-01-15 | - (dtucker) [openbsd-compat.c/pwcache.c] Pull in pwcache.c from OpenBSD (no | Darren Tucker | |
changes yet but there will be some to come). | |||
2010-01-13 | - (dtucker) [openbsd-compat/readpassphrase.c] Update to OpenBSD's r1.22. | Darren Tucker | |
Fixes bz #1590, where sometimes you could not interrupt a connection while ssh was prompting for a passphrase or password. | |||
2010-01-13 | - (dtucker) [openbsd-compat/readpassphrase.c] Update to OpenBSD's r1.21. | Darren Tucker | |
2010-01-13 | - (dtucker) [openbsd-compat/readpassphrase.c] Resync against OpenBSD's ↵ | Darren Tucker | |
r1.18: missing restore of SIGTTOU and some whitespace. | |||
2010-01-01 | Import 5.2p1 tarball | Colin Watson | |
2009-12-21 | - (dtucker) [auth-krb5.c platform.{c,h} openbsd-compat/port-aix.{c,h}] | Darren Tucker | |
Bug #1583: Use system's kerberos principal name on AIX if it's available. Based on a patch from and tested by Miguel Sanders. | |||
2009-12-08 | - (dtucker) Bug #1470: Disable OOM-killing of the listening sshd on Linux, | Darren Tucker | |
based on a patch from Vaclav Ovsik and Colin Watson. ok djm. | |||
2009-10-24 | - (dtucker) [session.c openbsd-compat/port-linux.{c,h}] Bug #1637: if selinux | Darren Tucker | |
is enabled set the security context to "sftpd_t" before running the internal sftp server Based on a patch from jchadima at redhat. | |||
2009-08-20 | - (dtucker) [session.c openbsd-compat/port-aix.h] Bugs #1249 and #1567: move | Darren Tucker | |
the setpcred call on AIX to immediately before the permanently_set_uid(). Ensures that we still have privileges when we call chroot and pam_open_sesson. Based on a patch from David Leonard. | |||
2009-08-17 | - (dtucker) [sshlogin.c openbsd-compat/port-aix.{c,h}] Bug #1595: make | Darren Tucker | |
PrintLastLog work on AIX. Based in part on a patch from Miguel Sanders. | |||
2009-07-13 | - (dtucker) [openbsd-compat/getrrsetbyname.c] Reduce answer buffer size so it | Darren Tucker | |
fits into 16 bits to work around a bug in glibc's resolver where it masks off the buffer size at 16 bits. Patch from Hauke Lampe, ok djm jakob. | |||
2009-03-08 | - (dtucker) [auth-passwd.c auth1.c auth2-kbdint.c auth2-none.c auth2-passwd.c | Darren Tucker | |
auth2-pubkey.c session.c openbsd-compat/bsd-cygwin_util.{c,h} openbsd-compat/daemon.c] Remove support for Windows 95/98/ME and very old version of Cygwin. Patch from vinschen at redhat com. | |||
2009-03-07 | - (dtucker) [configure.ac openbsd-compat/openssl-compat.{c,h}] | Darren Tucker | |
EVP_DigestUpdate does not exactly match the other OLD_EVP functions (eg in openssl 0.9.6) so add an explicit test for it. | |||
2009-03-07 | - (dtucker) [schnorr.c openbsd-compat/openssl-compat.{c,h}] Add | Darren Tucker | |
EVP_DigestUpdate to the OLD_EVP compatibility functions and tell schnorr.c to use them. Allows building with older OpenSSL versions. | |||
2009-02-16 | - (djm) [regress/conch-ciphers.sh regress/putty-ciphers.sh] | Damien Miller | |
[regress/putty-kex.sh regress/putty-transfer.sh] Downgrade disabled interop tests from FATAL error to a warning. Allows some interop tests to proceed if others are missing necessary prerequisites. | |||
2009-01-07 | - (tim) [configure.ac defines.h openbsd-compat/port-uw.c | Tim Rice | |
openbsd-compat/xcrypt.c] Add SECUREWARE support to OpenServer 6 SVR5 ABI. OK djm@ dtucker@ |