Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Remove support for pre-authentication compression. Doing compression | 2016-09-28 | 1 | -347/+0 | |
| | | | | | | | | | | | | | | | | | early in the protocol probably seemed reasonable in the 1990s, but today it's clearly a bad idea in terms of both cryptography (cf. multiple compression oracle attacks in TLS) and attack surface. Moreover, to support it across privilege-separation zlib needed the assistance of a complex shared-memory manager that made the required attack surface considerably larger. Prompted by Guido Vranken pointing out a compiler-elided security check in the shared memory manager found by Stack (http://css.csail.mit.edu/stack/); ok deraadt@ markus@ NB. pre-auth authentication has been disabled by default in sshd for >10 years. | ||||
* | SIZE_MAX is standard, we should be using it in preference to the | 2015-02-06 | 1 | -3/+3 | |
| | | | | obsolete SIZE_T_MAX. OK miod@ beck@ | ||||
* | Reduce use of <sys/param.h> and transition to <limits.h> throughout. | 2015-01-20 | 1 | -2/+2 | |
| | | | | ok djm markus | ||||
* | use standard types and formats for size_t like variables. ok dtucker | 2014-01-04 | 1 | -15/+16 | |
| | |||||
* | use calloc for all structure allocations; from markus@ | 2013-11-08 | 1 | -3/+4 | |
| | |||||
* | bye, bye xfree(); ok markus@ | 2013-05-17 | 1 | -6/+7 | |
| | |||||
* | alphabetize includes; reduces diff vs portable and style(9). ok stevesk djm | 2009-06-22 | 1 | -2/+2 | |
| | |||||
* | almost entirely get rid of the culture of ".h files that include .h files" | 2006-08-03 | 1 | -4/+5 | |
| | | | | | ok djm, sort of ok stevesk makes the pain stop in one easy step | ||||
* | move #include <sys/param.h> out of includes.h | 2006-07-26 | 1 | -1/+2 | |
| | |||||
* | move #include <string.h> out of includes.h | 2006-07-22 | 1 | -1/+2 | |
| | |||||
* | move #include <errno.h> out of includes.h; ok markus@ | 2006-07-11 | 1 | -1/+3 | |
| | |||||
* | Put $OpenBSD$ tags back (as comments) to replace the RCSID()s that | 2006-03-25 | 1 | -0/+1 | |
| | | | | Theo nuked - our scripts to sync -portable need them in the files | ||||
* | RCSID() can die | 2006-03-19 | 1 | -1/+0 | |
| | |||||
* | improve some code lint did not like; djm millert ok | 2004-05-11 | 1 | -2/+2 | |
| | |||||
* | Change mm_zalloc() sanity checks to be more in line with what | 2002-08-02 | 1 | -2/+4 | |
| | | | | | we do in calloc() and add a check to monitor_mm.c. OK provos@ and markus@ | ||||
* | tree(3) wants an int return value for its compare functions and | 2002-06-28 | 1 | -2/+9 | |
| | | | | | | the difference between two pointers is not an int. Just do the safest thing and store the result in a long and then return 0, -1, or 1 based on that result. | ||||
* | __FUNCTION__ -> __func__ | 2002-06-04 | 1 | -4/+4 | |
| | |||||
* | print strerror(errno) on mmap/munmap error; ok markus@ | 2002-05-28 | 1 | -3/+4 | |
| | |||||
* | ssize_t args use "%ld" and cast to (long) | 2002-03-25 | 1 | -10/+10 | |
| | | | | | size_t args use "%lu" and cast to (u_long) ok markus@ and thanks millert@ | ||||
* | whitespace KNF | 2002-03-19 | 1 | -4/+4 | |
| | |||||
* | clean up prototypes | 2002-03-19 | 1 | -3/+3 | |
| | |||||
* | shared memory abstraction for ssh-privsep | 2002-03-18 | 1 | -0/+329 | |