CVS log for src/crypto/dist/ssh/Attic/sftp.c

Up to [cvs.NetBSD.org] / src / crypto / dist / ssh

Request diff between arbitrary revisions

Keyword substitution: kv
Default branch: MAIN

bring matt-nb5-mips64 up to date with netbsd-5-1-RELEASE (except compat).

Pull up following revision(s) (requested by christos in ticket #1399):
	lib/libc/gen/glob.c: patch
	lib/libc/gen/glob.3: revision 1.37 via patch
	crypto/dist/ssh/sftp.c: patch
	crypto/dist/ssh/sftp-glob.c: patch
Add GLOB_LIMIT to the glob calls to prevent DoS attacks.
Apply more limits to GLOB_LIMIT, number of stat(2) calls from me and number
of readdir(3) calls from Maksymilian Arciemowicz. Also reduce the memory
used by matches strings from Maksymilian Arciemowicz.

Pull up following revision(s) (requested by christos in ticket #1399):
	lib/libc/gen/glob.c: patch
	lib/libc/gen/glob.3: revision 1.37 via patch
	crypto/dist/ssh/sftp.c: patch
	crypto/dist/ssh/sftp-glob.c: patch
Add GLOB_LIMIT to the glob calls to prevent DoS attacks.
Apply more limits to GLOB_LIMIT, number of stat(2) calls from me and number
of readdir(3) calls from Maksymilian Arciemowicz. Also reduce the memory
used by matches strings from Maksymilian Arciemowicz.

Pull up following revision(s) (requested by christos in ticket #1430):
	lib/libc/gen/glob.c: revision 1.25
	lib/libc/gen/glob.c: revision 1.26
	lib/libc/gen/glob.3: revision 1.37
	crypto/dist/ssh/sftp.c: patch
	crypto/dist/ssh/sftp-glob.c: patch
Add GLOB_LIMIT to the glob calls to prevent DoS attacks.
Apply more limits to GLOB_LIMIT, number of stat(2) calls from me and number
of readdir(3) calls from Maksymilian Arciemowicz. Also reduce the memory
used by matches strings from Maksymilian Arciemowicz.
Avoid DoS attacks for patterns that have braces. Noted by Maksymilian
Arciemowicz.
XXX: Pullup to 5.x

Pull up following revision(s) (requested by christos in ticket #1430):
	lib/libc/gen/glob.c: revision 1.25
	lib/libc/gen/glob.c: revision 1.26
	lib/libc/gen/glob.3: revision 1.37
	crypto/dist/ssh/sftp.c: patch
	crypto/dist/ssh/sftp-glob.c: patch
Add GLOB_LIMIT to the glob calls to prevent DoS attacks.
Apply more limits to GLOB_LIMIT, number of stat(2) calls from me and number
of readdir(3) calls from Maksymilian Arciemowicz. Also reduce the memory
used by matches strings from Maksymilian Arciemowicz.
Avoid DoS attacks for patterns that have braces. Noted by Maksymilian
Arciemowicz.
XXX: Pullup to 5.x

ssh has moved (a long time ago)

Sync with HEAD.

Third (and last) commit. See http://mail-index.netbsd.org/source-changes/2009/05/13/msg221222.html

merge changes

from ftp.openbsd.org

resolve conflicts.

Import 5.0

resolve conflicts.

import v4.6

Resolve conflicts

from www.openssh.org

quell GCC 4.1 uninitialised variable warnings.

XXX: we should audit the tree for which old ones are no longer needed
after getting the older compilers out of the tree..

fix memory leaks, coverity cid 2016.

resolve conflicts

From ftp.openbsd.org.

resolve conflicts.

Import OpenSSH 4.0 from ftp.openbsd.org

Resolve conflicts.

from ftp.openbsd.org

add __RCSID("$NetBSD$"), because it's hard to track our changes in a
binary when we only have the vendor's RCSID.

sync w/ 3.6.1

OpenSSH 3.6.1 as of 2003/4/3

* The 'kex guesses' bugfix from OpenSSH 3.6 triggers a bug
  in a few other SSH v2 implementations and causes connections to
  stall.  OpenSSH 3.6.1 disables this bugfix when interoperating
  with these implementations.
* RSA blinding is now used by ssh(1), sshd(8) and ssh-agent(1).
  in order to avoid potential timing attacks against the RSA keys.
  Older versions of OpenSSH have been using RSA blinding in
  ssh-keysign(1) only.
* ssh-agent(1) optionally requires user confirmation if a key gets
  used, see '-c' in ssh-add(1).
* sshd(8) now handles PermitRootLogin correctly when UsePrivilegeSeparation
  is enabled.
* sshd(8) now removes X11 cookies when a session gets closed.
* ssh-keysign(8) is disabled by default and only enabled if the
  new EnableSSHKeysign option is set in the global ssh_config(5)
  file.
* ssh(1) and sshd(8) now handle 'kex guesses' correctly (key exchange
  guesses).
* ssh(1) no longer overwrites SIG_IGN.  This matches behaviour from
  rsh(1) and is used by backup tools.
* setting ProxyCommand to 'none' disables the proxy feature, see
  ssh_config(5).
* scp(1) supports add -1 and -2.
* scp(1) supports bandwidth limiting.
* sftp(1) displays a progressmeter.
* sftp(1) has improved error handling for scripting.

upgrade to openssh 3.5.  major changes include:
- krb4/5 support for privsep (krb5 diff was already applied)

includes fake implementaation of getpeereid() from openssh-portable, which
does nothing useful - need improvement.

OpenSSH 3.5 as of Oct 1, 2002

Pullup to HEAD as of 20020626 16:50:00 UTC (requested by itojun in ticket #379):
Update to OpenSSH 3.4.
[tv: EXCEPTION: Reverted rev 1.3 of random.h and 1.5 of random.c to bring back
the OpenSSH-private implementation of arc4random().]

sync with openssh 3.3.
local mods included to make it compile with openssl 0.9.6d.

OpenSSH 3.3 as of June 24, 2002.
- ssh is no longer seruid root.  ssh-keyscan is added to read secret host keys.
  protocol version 1 rsh-like authentication is gone.
- FallBackToRsh is deprecated.

sync with openssh 3.2 as of 2002/4/22.
- privilege separation
- afs/kerberos auth security issue fixed

OpenSSH 3.2 as of 2002/4/22.  fixes issues with AFS/kerberos auth

sync w/ 3.1 as of 2002/3/8.  configuration file directory is still /etc
(openbsd usr.bin/ssh is using /etc/ssh)

OpenSSH 3.1 as of 2002/3/8.  plugs off-by-one security hole

Pull up revisions 1.4-1.9 (requested by itojun):
  Upgrade OpenSSH to version 3.0.2.

sync with openssh 2.9.9 around 9/27.

OpenSSH 2.9.9 as of 2001/9/27

upgrade to openssh 2.9, around 2001/6/24 (from openbsd usr.bin/ssh).

- authorized_keys2 and known_hosts2 are obsoleted, and integrated
  into those without "2".
- file name change, /etc/primes -> /etc/moduli
- cleanups

OpenSSH 2.9 as of 2001/6/24

upgrade to openssh (openbsd usr.bin/ssh) 2.9, around 5/15/2001.

OpenSSH 2.9 as of 2001/5/15

reduce amount of diff with openbsd usr.bin/ssh (for -Wall -Werror clean)
so that we can get rid of local changes.

openssh side do not like static functions so put prototypes into each files
rather than making function static.

upgrade to openssh 2.5.4 (2001/4/10).

major behavior changes: (made in openssh master tree - openbsd usr.bin/ssh)
- ssh(1) now defaults to ssh protocol version 2.
  if you want version 1 to take precedence, use /etc/ssh.conf to override.
- config change: ~/.ssh/id_rsa[12] is now ~/.ssh/id_rsa (changed 4/3)
- forced client rekey for protocol version 2 (~R)
- swap gid when uid swaps.
- ListenAddress syntax can take [foo]:port for IPv6 numerics.
- "ssh -D 1080" allows us to use ssh tunnel as SOCKS4 proxy.

OpenSSH 2.5.4 as of 2001/04/10

sync with openssh 2.5.2 (from openbsd usr.bin/ssh, not from portable).

OpenSSH 2.5.2 as of 3/19/2001, from openbsd usr.bin/ssh

Pull up revisions 1.1-1.3 (requested by itojun):
  Update SSH to version found on trunk as of 26 Feb 2001.

file sftp.c was added on branch netbsd-1-5 on 2001-02-26 20:27:23 +0000

sync with 2.3.2.

OpenSSH 2.3.2 as of 2001/2/9

sync crypto/dist/ssh with re-importorted tree.  try to minimize diffs
with openssh tree to ease future upgrade.  re-do local changes, including:
- prototype pedants
- IgnoreRootRhosts
- login.conf user validation
some of the local changes that weren't used are omitted for now.  we may
need to revisit those afterwards.

it adds "sftp".

OpenSSH 2.3.1 as of 2001/2/8

Initial revision