summaryrefslogtreecommitdiffstats
path: root/usr.bin/ssh/deattack.c (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Reduce use of <sys/param.h> and transition to <limits.h> throughout.deraadt2015-01-201-2/+1
| | | | ok djm markus
* update packet.c & isolate, introduce struct sshmarkus2015-01-191-38/+44
| | | | | | | | a) switch packet.c to buffer api and isolate per-connection info into struct ssh b) (de)serialization of the state is moved from monitor to packet.c c) the old packet.c API is implemented in opacket.[ch] d) compress.c/h is removed and integrated into packet.c with and ok djm@
* limit maximum work performed by the CRC compensation attack detector,djm2006-09-161-3/+23
| | | | | problem reported by Tavis Ormandy, Google Security Team; ok markus@ deraadt@
* almost entirely get rid of the culture of ".h files that include .h files"deraadt2006-08-031-3/+5
| | | | | ok djm, sort of ok stevesk makes the pain stop in one easy step
* move #include <string.h> out of includes.hstevesk2006-07-221-1/+3
|
* replace {GET,PUT}_XXBIT macros with functionally similar functions,djm2006-03-301-3/+3
| | | | | | silencing a heap of lint warnings. also allows them to use __bounded__ checking which can't be applied to macros; requested by and feedback from deraadt@
* Put $OpenBSD$ tags back (as comments) to replace the RCSID()s thatdjm2006-03-251-0/+1
| | | | Theo nuked - our scripts to sync -portable need them in the files
* change OpenSSH's xrealloc() function from being xrealloc(p, new_size) todjm2006-03-251-1/+1
| | | | | | | | xrealloc(p, new_nmemb, new_itemsize). realloc is particularly prone to integer overflows because it is almost always allocating "n * size" bytes, so this is a far safer API; ok deraadt@
* introduce xcalloc() and xasprintf() failure-checked allocations functionsdjm2006-03-251-1/+1
| | | | | | | | | | and use them throughout openssh xcalloc is particularly important because malloc(nmemb * size) is a dangerous idiom (subject to integer overflow) and it is time for it to die feedback and ok deraadt@
* remove IV support from the CRC attack detector, OpenSSH has never useddjm2006-03-221-26/+5
| | | | | | it - it only applied to IDEA-CFB, which we don't support. prompted by NetBSD Coverity report via elad AT netbsd.org; feedback markus@ "nuke it" deraadt@
* spacingderaadt2006-03-201-1/+1
|
* RCSID() can diederaadt2006-03-191-1/+0
|
* duplicate #includestevesk2006-02-071-2/+1
|
* more buffer allocation fixes; from Solar Designer; CAN-2003-0682; ok millert@markus2003-09-181-3/+3
|
* $OpenBSD$ and RCSID() cleanup: don't use RCSID() in .h files; addstevesk2002-03-041-2/+2
| | | | | missing RCSID() to .c files and remove dup /*$OpenBSD$*/ from .c files. ok markus@
* basic KNF done while i was looking for something elsederaadt2001-12-191-3/+3
|
* make it compile with more strict prototype checkingitojun2001-12-051-1/+2
|
* kill more registersmpech2001-11-191-3/+3
| | | | millert@ ok
* more strict prototypes. raise warning level in Makefile.inc. markus ok'editojun2001-06-231-4/+3
| | | | TODO; cleanup headers
* KNFderaadt2001-03-011-2/+2
|
* split ssh.h and try to cleanup the #include mess. remove unnecessary #includes.markus2001-01-211-2/+2
| | | | rename util.[ch] -> misc.[ch]
* replace 'unsigned bla' with 'u_bla' everywhere. also, replace 'char unsigned'markus2000-12-191-8/+8
| | | | with u_char.
* so that large packets do not wrap "n"; from netbsdmarkus2000-10-311-2/+2
|
* cleanup copyright notices on all files. I have attempted to be accurate withderaadt2000-09-071-1/+2
| | | | | | | the details. everything is now under Tatu's licence (which I copied from his readme), and/or the core-sdi bsd-ish thing for deattack, or various openbsd developers under a 2-term bsd licence. We're not changing any rules, just being accurate.
* rename crc32() to ssh_crc32() to avoid zlib name clash. do not move toderaadt2000-08-191-2/+2
| | | | libz crc32 function yet, because it has ugly "long"'s in it; oneill@cs.sfu.ca
* OpenBSD tagmarkus2000-06-201-1/+1
|
* much more KNFderaadt1999-11-241-2/+3
|
* KNF part 1markus1999-11-231-131/+104
|
* replace assert() with error, fatal or packet_disconnectmarkus1999-11-021-4/+5
|
* move auth-sockets to private dirmarkus1999-10-051-1/+2
| | | | delete minfd residua
* include licensing infodugsong1999-10-051-4/+17
|
* crc32 compensation attack fix from CORE-SDI. "it's not crypto..." -- deraadt@dugsong1999-10-051-0/+166