summaryrefslogtreecommitdiffstats
path: root/usr.bin/ssh/monitor_mm.c (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Remove support for pre-authentication compression. Doing compressiondjm2016-09-281-347/+0
| | | | | | | | | | | | | | | | | early in the protocol probably seemed reasonable in the 1990s, but today it's clearly a bad idea in terms of both cryptography (cf. multiple compression oracle attacks in TLS) and attack surface. Moreover, to support it across privilege-separation zlib needed the assistance of a complex shared-memory manager that made the required attack surface considerably larger. Prompted by Guido Vranken pointing out a compiler-elided security check in the shared memory manager found by Stack (http://css.csail.mit.edu/stack/); ok deraadt@ markus@ NB. pre-auth authentication has been disabled by default in sshd for >10 years.
* SIZE_MAX is standard, we should be using it in preference to themillert2015-02-061-3/+3
| | | | obsolete SIZE_T_MAX. OK miod@ beck@
* Reduce use of <sys/param.h> and transition to <limits.h> throughout.deraadt2015-01-201-2/+2
| | | | ok djm markus
* use standard types and formats for size_t like variables. ok dtuckertedu2014-01-041-15/+16
|
* use calloc for all structure allocations; from markus@djm2013-11-081-3/+4
|
* bye, bye xfree(); ok markus@djm2013-05-171-6/+7
|
* alphabetize includes; reduces diff vs portable and style(9). ok stevesk djmdtucker2009-06-221-2/+2
|
* almost entirely get rid of the culture of ".h files that include .h files"deraadt2006-08-031-4/+5
| | | | | ok djm, sort of ok stevesk makes the pain stop in one easy step
* move #include <sys/param.h> out of includes.hstevesk2006-07-261-1/+2
|
* move #include <string.h> out of includes.hstevesk2006-07-221-1/+2
|
* move #include <errno.h> out of includes.h; ok markus@stevesk2006-07-111-1/+3
|
* Put $OpenBSD$ tags back (as comments) to replace the RCSID()s thatdjm2006-03-251-0/+1
| | | | Theo nuked - our scripts to sync -portable need them in the files
* RCSID() can diederaadt2006-03-191-1/+0
|
* improve some code lint did not like; djm millert okderaadt2004-05-111-2/+2
|
* Change mm_zalloc() sanity checks to be more in line with whatmillert2002-08-021-2/+4
| | | | | we do in calloc() and add a check to monitor_mm.c. OK provos@ and markus@
* tree(3) wants an int return value for its compare functions andmillert2002-06-281-2/+9
| | | | | | the difference between two pointers is not an int. Just do the safest thing and store the result in a long and then return 0, -1, or 1 based on that result.
* __FUNCTION__ -> __func__markus2002-06-041-4/+4
|
* print strerror(errno) on mmap/munmap error; ok markus@stevesk2002-05-281-3/+4
|
* ssize_t args use "%ld" and cast to (long)stevesk2002-03-251-10/+10
| | | | | size_t args use "%lu" and cast to (u_long) ok markus@ and thanks millert@
* whitespace KNFmarkus2002-03-191-4/+4
|
* clean up prototypesmarkus2002-03-191-3/+3
|
* shared memory abstraction for ssh-privsepprovos2002-03-181-0/+329