| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | Revert the change for bz #1307 as it causes connection aborts if an IGNORE |   dtucker | 2008-01-23 | 1 | -6/+7 | |
| | | | | | | packet arrives while we're waiting in packet_read_expect (and possibly elsewhere). | |||||
| * | Make SSH2_MSG_UNIMPLEMENTED and SSH2_MSG_IGNORE messages reset the | dtucker | 2007-12-28 | 1 | -7/+6 | |
| | | | | | | | ServerAlive and ClientAlive timers. Prevents dropping a connection when these are enabled but the peer does not support our keepalives. bz #1307, ok djm@. | |||||
| * | Add a new MAC algorithm for data integrity, UMAC-64 (not default yet, must |   pvalchev | 2007-06-07 | 1 | -6/+3 | |
| | | | | | | | | | | | specify umac-64@openssh.com). Provides about 20% end-to-end speedup compared to hmac-md5. Represents a different approach to message authentication to that of HMAC that may be beneficial if HMAC based on one of its underlying hash algorithms is found to be vulnerable to a new attack. http://www.ietf.org/rfc/rfc4418.txt in conjunction with and OK djm@ | |||||
| * | Preserve MAC ctx between packets, saving 2xhash calls per-packet. |   djm | 2007-06-05 | 1 | -4/+8 | |
| | | | | | | | | Yields around a 12-16% end-to-end speedup for arcfour256/hmac-md5 patch from markus@ tested dtucker@ and myself, ok markus@ and me (I'm committing at his request) | |||||
| * | gc unreachable code; spotted by Tavis Ormandy | djm | 2007-05-31 | 1 | -2/+1 | |
| | | ||||||
| * | client NULL deref on protocol error; Tavis Ormandy, Google Security Team |   markus | 2006-09-19 | 1 | -1/+4 | |
| | | ||||||
| * | limit maximum work performed by the CRC compensation attack detector, | djm | 2006-09-16 | 1 | -4/+11 | |
| | | | | | | problem reported by Tavis Ormandy, Google Security Team; ok markus@ deraadt@ | |||||
| * | Typo in comment | dtucker | 2006-08-05 | 1 | -2/+2 | |
| | | ||||||
| * | almost entirely get rid of the culture of ".h files that include .h files" |   deraadt | 2006-08-03 | 1 | -8/+4 | |
| | | | | | | ok djm, sort of ok stevesk makes the pain stop in one easy step | |||||
| * | move #include <stdio.h> out of includes.h |   stevesk | 2006-08-01 | 1 | -1/+2 | |
| | | ||||||
| * | move #include <stdlib.h> out of includes.h | stevesk | 2006-07-26 | 1 | -1/+2 | |
| | | ||||||
| * | move #include <sys/param.h> out of includes.h | stevesk | 2006-07-26 | 1 | -1/+2 | |
| | | ||||||
| * | move #include <sys/time.h> out of includes.h | stevesk | 2006-07-25 | 1 | -1/+2 | |
| | | ||||||
| * | move #include <string.h> out of includes.h | stevesk | 2006-07-22 | 1 | -1/+2 | |
| | | ||||||
| * | move #include <unistd.h> out of includes.h | stevesk | 2006-07-17 | 1 | -1/+2 | |
| | | ||||||
| * | move #include <errno.h> out of includes.h; ok markus@ | stevesk | 2006-07-11 | 1 | -1/+2 | |
| | | ||||||
| * | move #include <stdarg.h> out of includes.h; ok markus@ | stevesk | 2006-07-10 | 1 | -1/+3 | |
| | | ||||||
| * | move #include <sys/socket.h> out of includes.h | stevesk | 2006-07-08 | 1 | -1/+2 | |
| | | ||||||
| * | move #include <netinet/in.h> out of includes.h; ok deraadt@ | stevesk | 2006-07-05 | 1 | -1/+3 | |
| | | ||||||
| * | replace {GET,PUT}_XXBIT macros with functionally similar functions, | djm | 2006-03-30 | 1 | -8/+7 | |
| | | | | | | | silencing a heap of lint warnings. also allows them to use __bounded__ checking which can't be applied to macros; requested by and feedback from deraadt@ | |||||
| * | remove (char *) casts to a function that accepts void * for the arg | deraadt | 2006-03-25 | 1 | -2/+2 | |
| | | ||||||
| * | needed casts (always will be needed) | deraadt | 2006-03-25 | 1 | -2/+2 | |
| | | ||||||
| * | Put $OpenBSD$ tags back (as comments) to replace the RCSID()s that | djm | 2006-03-25 | 1 | -0/+1 | |
| | | | | | Theo nuked - our scripts to sync -portable need them in the files | |||||
| * | introduce xcalloc() and xasprintf() failure-checked allocations functions | djm | 2006-03-25 | 1 | -2/+2 | |
| | | | | | | | | | | | and use them throughout openssh xcalloc is particularly important because malloc(nmemb * size) is a dangerous idiom (subject to integer overflow) and it is time for it to die feedback and ok deraadt@ | |||||
| * | remove IV support from the CRC attack detector, OpenSSH has never used | djm | 2006-03-22 | 1 | -1/+1 | |
| | | | | | | | it - it only applied to IDEA-CFB, which we don't support. prompted by NetBSD Coverity report via elad AT netbsd.org; feedback markus@ "nuke it" deraadt@ | |||||
| * | spacing | deraadt | 2006-03-20 | 1 | -0/+8 | |
| | | ||||||
| * | in a switch (), break after return or goto is stupid | deraadt | 2006-03-20 | 1 | -2/+0 | |
| | | ||||||
| * | RCSID() can die | deraadt | 2006-03-19 | 1 | -1/+0 | |
| | | ||||||
| * | Set TCP_NODELAY for all connections not just "interactive" ones. Fixes | dtucker | 2006-03-13 | 1 | -3/+2 | |
| | | | | | | poor performance and protocol stalls under some network conditions (mindrot bugs #556 and #981). Patch originally from markus@, ok djm@ | |||||
| * | move #include <netinet/in_systm.h> and <netinet/ip.h> out of | stevesk | 2006-02-08 | 1 | -1/+4 | |
| | | | | | includes.h; ok markus@ | |||||
| * | no need to escape single quotes in comments, no binary change | djm | 2005-10-30 | 1 | -2/+2 | |
| | | ||||||
| * | missing packet_init_compression(); from solar | markus | 2005-07-28 | 1 | -1/+2 | |
| | | ||||||
| * | add a new compression method that delays compression until the user | markus | 2005-07-25 | 1 | -2/+54 | |
| | | | | | | | | | | has been authenticated successfully and set compression to 'delayed' for sshd. this breaks older openssh clients (< 3.5) if they insist on compression, so you have to re-enable compression in sshd_config. ok djm@ | |||||
| * | make this -Wsign-compare clean; ok avsm@ markus@ | djm | 2005-06-17 | 1 | -4/+4 | |
| | | ||||||
| * | disconnect for invalid (out of range) message types. | markus | 2004-10-20 | 1 | -1/+5 | |
| | | ||||||
| * | make ssh -Wshadow clean, no functional changes |   avsm | 2004-06-21 | 1 | -17/+17 | |
| | | | | | markus@ ok | |||||
| * | set_nonblock() instead of fnctl(...,O_NONBLOCK); "looks sane" deraadt@ | djm | 2004-06-14 | 1 | -7/+4 | |
| | | ||||||
| * | improve some code lint did not like; djm millert ok | deraadt | 2004-05-11 | 1 | -5/+7 | |
| | | ||||||
| * | replace fatal_cleanup() and linked list of fatal callbacks with static | markus | 2003-09-23 | 1 | -5/+5 | |
| | | | | | | | cleanup_exit() function. re-refine cleanup_exit() where appropriate, allocate sshd's authctxt eary to allow simpler cleanup in sshd. tested by many, ok deraadt@ | |||||
| * | do not call packet_close on fatal; ok deraadt | markus | 2003-09-19 | 1 | -4/+1 | |
| | | ||||||
| * | buffer_dump only if PACKET_DEBUG is defined; Jedi/Sector One; pr 3471 | markus | 2003-09-19 | 1 | -1/+3 | |
| | | ||||||
| * | the 2^(blocksize*2) rekeying limit is too expensive for 3DES, | markus | 2003-07-10 | 1 | -2/+9 | |
| | | | | | blowfish, etc, so enforce a 1GB limit for small blocksizes. | |||||
| * | int -> u_int; ok djm@, deraadt@, mouring@ | markus | 2003-06-24 | 1 | -4/+4 | |
| | | ||||||
| * | mostly ansi cleanup; pval ok | deraadt | 2003-06-10 | 1 | -2/+2 | |
| | | ||||||
| * | rename log() into logit() to avoid name conflict. markus ok, from netbsd |   itojun | 2003-04-08 | 1 | -9/+9 | |
| | | ||||||
| * | reapply rekeying chage, tested by henning@, ok djm@ | markus | 2003-04-02 | 1 | -22/+123 | |
| | | ||||||
| * | backout rekeying changes (for 3.6.1) | markus | 2003-04-01 | 1 | -123/+22 | |
| | | ||||||
| * | rekeying bugfixes and automatic rekeying: | markus | 2003-04-01 | 1 | -22/+123 | |
| | | | | | | | | | | | | | * both client and server rekey _automatically_ (a) after 2^31 packets, because after 2^32 packets the sequence number for packets wraps (b) after 2^(blocksize_in_bits/4) blocks (see: http://www.ietf.org/internet-drafts/draft-ietf-secsh-newmodes-00.txt) (a) and (b) are _enabled_ by default, and only disabled for known openssh versions, that don't support rekeying properly. * client option 'RekeyLimit' * do not reply to requests during rekeying | |||||
| * | static | markus | 2002-12-10 | 1 | -2/+2 | |
| | | ||||||
| * | move tos handling to packet_set_tos; ok provos/henning/deraadt | markus | 2002-12-10 | 1 | -26/+17 | |
| | | ||||||
 |
index : wireguard-openbsd | |
| WireGuard implementation for the OpenBSD kernel | Matt Dunwoodie |
| summaryrefslogtreecommitdiffstats |