| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | use the new variant log macros instead of prepending __func__ and |   djm | 2020-10-18 | 1 | -19/+18 |
| | | | | | appending ssh_err(r) manually; ok markus@ | ||||
| * | change explicit_bzero();free() to freezero() |   jsg | 2020-02-26 | 1 | -3/+2 |
| | | | | | | | | | While freezero() returns early if the pointer is NULL the tests for NULL in callers are left to avoid warnings about passing an uninitialised size argument across a function boundry. ok deraadt@ djm@ | ||||
| * | stdarg.h required more broadly; ok djm |   deraadt | 2019-11-13 | 1 | -1/+2 |
| | | |||||
| * | lots of things were relying on libcrypto headers to transitively | djm | 2019-09-06 | 1 | -1/+2 |
| | | | | | | include various system headers (mostly stdlib.h); include them explicitly | ||||
| * | treat ssh_packet_write_wait() errors as fatal; ok djm@ |   markus | 2018-07-11 | 1 | -3/+3 |
| | | |||||
| * | sshd: switch authentication to sshbuf API; ok djm@ | markus | 2018-07-09 | 1 | -29/+40 |
| | | |||||
| * | switch auth2 to ssh_dispatch API; ok djm@ | markus | 2017-05-30 | 1 | -14/+17 |
| | | |||||
| * | protocol handlers all get struct ssh passed; ok djm@ | markus | 2017-05-30 | 1 | -4/+3 |
| | | |||||
| * | sshd: pass struct ssh to auth functions; ok djm@ | markus | 2017-05-30 | 1 | -2/+3 |
| | | |||||
| * | remove ssh1 references; ok djm@ | markus | 2017-05-30 | 1 | -2/+1 |
| | | |||||
| * | fix signed/unsigned errors reported by clang-3.7; add | djm | 2016-05-02 | 1 | -3/+3 |
| | | | | | | | sshbuf_dup_string() to replace a common idiom of strdup(sshbuf_ptr()) with better safety checking; feedback and ok markus@ | ||||
| * | only query each keyboard-interactive device once per authentication | djm | 2015-07-18 | 1 | -3/+8 |
| | | | | | request regardless of how many times it is listed; ok markus@ | ||||
| * | move dispatch to struct ssh; ok djm@ | markus | 2015-01-19 | 1 | -3/+4 |
| | | |||||
| * | convert memset of potentially-private data to explicit_bzero() | djm | 2014-02-02 | 1 | -2/+2 |
| | | |||||
| * | replace most bzero with explicit_bzero, except a few that cna be memset |   tedu | 2014-01-31 | 1 | -2/+2 |
| | | | | | ok djm dtucker | ||||
| * | use calloc for all structure allocations; from markus@ | djm | 2013-11-08 | 1 | -2/+2 |
| | | |||||
| * | bye, bye xfree(); ok markus@ | djm | 2013-05-17 | 1 | -15/+12 |
| | | |||||
| * | add submethod support to AuthenticationMethods; ok and freedback djm@ | markus | 2013-03-07 | 1 | -4/+8 |
| | | |||||
| * | Fix compilation with -Wall -Werror (trivial type fixes) | djm | 2012-12-03 | 1 | -2/+3 |
| | | |||||
| * | Fixes logging of partial authentication when privsep is enabled | djm | 2012-12-02 | 1 | -7/+5 |
| | | | | | | | | | | | | | | Previously, we recorded "Failed xxx" since we reset authenticated before calling auth_log() in auth2.c. This adds an explcit "Partial" state. Add a "submethod" to auth_log() to report which submethod is used for keyboard-interactive. Fix multiple authentication when one of the methods is keyboard-interactive. ok markus@ | ||||
| * | replace by-hand string building with xasprinf(); ok deraadt@ | djm | 2008-12-09 | 1 | -7/+3 |
| | | |||||
| * | unifdef -DBSD_AUTH | djm | 2007-09-21 | 1 | -25/+1 |
| | | | | | | | | unifdef -USKEY These options have been in use for some years; ok markus@ "no objection" millert@ | ||||
| * | spaces |   stevesk | 2007-01-03 | 1 | -2/+2 |
| | | |||||
| * | Zap unused variables in -DSKEY code. ok djm@ |   dtucker | 2006-08-05 | 1 | -2/+3 |
| | | |||||
| * | almost entirely get rid of the culture of ".h files that include .h files" | deraadt | 2006-08-03 | 1 | -3/+6 |
| | | | | | | ok djm, sort of ok stevesk makes the pain stop in one easy step | ||||
| * | move #include <stdio.h> out of includes.h | stevesk | 2006-08-01 | 1 | -1/+2 |
| | | |||||
| * | move #include <string.h> out of includes.h | stevesk | 2006-07-22 | 1 | -1/+3 |
| | | |||||
| * | Put $OpenBSD$ tags back (as comments) to replace the RCSID()s that | djm | 2006-03-25 | 1 | -0/+1 |
| | | | | | Theo nuked - our scripts to sync -portable need them in the files | ||||
| * | introduce xcalloc() and xasprintf() failure-checked allocations functions | djm | 2006-03-25 | 1 | -1/+1 |
| | | | | | | | | | | | and use them throughout openssh xcalloc is particularly important because malloc(nmemb * size) is a dangerous idiom (subject to integer overflow) and it is time for it to die feedback and ok deraadt@ | ||||
| * | RCSID() can die | deraadt | 2006-03-19 | 1 | -1/+0 |
| | | |||||
| * | knf says that a 2nd level indent is four (not three or five) spaces | djm | 2005-07-17 | 1 | -2/+2 |
| | | |||||
| * | make this -Wsign-compare clean; ok avsm@ markus@ | djm | 2005-06-17 | 1 | -5/+4 |
| | | |||||
| * | Have keyboard-interactive code call the drivers even for responses for | dtucker | 2005-01-19 | 1 | -8/+3 |
| | | | | | | | | | invalid logins. This allows the drivers themselves to decide how to handle them and prevent leaking information where possible. Existing behaviour for bsdauth is maintained by checking authctxt->valid in the bsdauth driver. Note that any third-party kbdint drivers will now need to be able to handle responses for invalid logins. ok markus@ | ||||
| * | Remove redundant #include; ok markus@ | dtucker | 2004-06-01 | 1 | -2/+1 |
| | | |||||
| * | minor KNF | deraadt | 2002-06-30 | 1 | -2/+2 |
| | | |||||
| * | make sure # of response matches # of queries, fixes int overflow; from ISS | markus | 2002-06-26 | 1 | -6/+12 |
| | | |||||
| * | KNF done automatically while reading.... | deraadt | 2002-06-19 | 1 | -2/+2 |
| | | |||||
| * | integrate privilege separated openssh; its turned off by default for now. |   provos | 2002-03-18 | 1 | -1/+20 |
| | | | | | work done by me and markus@ | ||||
| * | use buffer API and avoid static strings of fixed size; ok provos@/mouring@ | markus | 2002-01-13 | 1 | -8/+12 |
| | | |||||
| * | use snprintf; mouring@ | markus | 2002-01-11 | 1 | -4/+3 |
| | | |||||
| * | use strlcpy not strlcat; mouring@ | markus | 2002-01-11 | 1 | -3/+2 |
| | | |||||
| * | remove plen from the dispatch fn. it's no longer used. | markus | 2001-12-28 | 1 | -3/+3 |
| | | |||||
| * | s/packet_done/packet_check_eom/ (end-of-message); ok djm@ | markus | 2001-12-28 | 1 | -2/+2 |
| | | |||||
| * | Conformance fix: we should send failing packet sequence number when | djm | 2001-12-20 | 1 | -3/+3 |
| | | | | | | responding with a SSH_MSG_UNIMPLEMENTED message. Spotted by yakk@yakk.dot.net; ok markus@ | ||||
| * | basic KNF done while i was looking for something else | deraadt | 2001-12-19 | 1 | -2/+2 |
| | | |||||
| * | add auth2_challenge_stop(), simplifies cleanup of kbd-int sessions, | markus | 2001-12-09 | 1 | -16/+19 |
| | | | | | fixes memleak. | ||||
| * | typos; from solar | markus | 2001-09-27 | 1 | -2/+2 |
| | | |||||
| * | more strict prototypes. raise warning level in Makefile.inc. markus ok'ed |   itojun | 2001-06-23 | 1 | -8/+8 |
| | | | | | TODO; cleanup headers | ||||
| * | the challenge response device decides how to handle non-existing users. | markus | 2001-06-03 | 1 | -2/+2 |
| | | | | | -> fake challenges for skey and cryptocard | ||||
| * | improved kbd-interactive support. work by per@appgate.com and me | markus | 2001-05-18 | 1 | -42/+237 |
| | | |||||
 |
index : wireguard-openbsd | |
| WireGuard implementation for the OpenBSD kernel | Matt Dunwoodie |
| summaryrefslogtreecommitdiffstats |