Commit Graph

  • a6f8f793d4 upstream: rewrite SOCKS4/4A/5 parsing code to use sshbuf functions master anongit/master djm@openbsd.org 2026-01-04 09:52:58 +00:00
  • ea367b4bbc upstream: test the right thing, doofus github/master github-selfhosted/master djm@openbsd.org 2025-12-30 04:28:42 +00:00
  • 5f2bc9cb86 upstream: avoid possible NULL deref if djm@openbsd.org 2025-12-30 04:23:53 +00:00
  • b9c318777e upstream: unit tests for sshbuf_consume_upto_child() djm@openbsd.org 2025-12-30 00:12:58 +00:00
  • dd49a87bf4 upstream: Remove bug compatibility for implementations that don't djm@openbsd.org 2025-12-30 00:35:37 +00:00
  • ca313fef2d upstream: Enforce maximum packet/block limit during djm@openbsd.org 2025-12-30 00:22:58 +00:00
  • 55b6b16974 upstream: Add sshbuf_consume_upto_child(), to similify particular djm@openbsd.org 2025-12-29 23:52:09 +00:00
  • 6eafc52a41 Update ssh-agent.1 Ludovic Rousseau 2025-12-27 10:07:22 +01:00
  • 09daf2ac5f upstream: correctly quote wildcard host certificate principal name, djm@openbsd.org 2025-12-22 03:36:43 +00:00
  • dfd710e4e2 upstream: return 0 in void function; spotted by clang -Wextra djm@openbsd.org 2025-12-22 03:12:05 +00:00
  • ecdf9b9f8e upstream: regression tests for certificates with empty principals djm@openbsd.org 2025-12-22 01:50:46 +00:00
  • adca2f4398 upstream: don't try to test webauthn signatures. Nothing in OpenSSH djm@openbsd.org 2025-12-22 01:31:07 +00:00
  • 5166b6cbf2 upstream: When certificate support was added to OpenSSH, djm@openbsd.org 2025-12-22 01:49:03 +00:00
  • aaac8c61c1 upstream: Don't misuse the sftp limits extension's open-handles djm@openbsd.org 2025-12-22 01:20:39 +00:00
  • daf6bdd34b upstream: add a "ssh -O channels user@host" multiplexing command to djm@openbsd.org 2025-12-22 01:17:31 +00:00
  • b652322cdc upstream: typo in comment djm@openbsd.org 2025-12-19 01:27:19 +00:00
  • 0b98be75db upstream: correctly check subsystem command is not the empty string djm@openbsd.org 2025-12-19 01:26:39 +00:00
  • 345892ba2e upstream: regression test for bz3906: sshd crashing at connection djm@openbsd.org 2025-12-19 00:57:42 +00:00
  • 81e5bb8d93 upstream: check that invalid subsystem directives inside Match djm@openbsd.org 2025-12-19 00:48:47 +00:00
  • 831e6db69f upstream: don't crash at connection time if the main sshd_config djm@openbsd.org 2025-12-19 00:56:34 +00:00
  • 4e0f2dee54 upstream: detect invalid sshd_config Subsystem directives inside djm@openbsd.org 2025-12-19 00:48:04 +00:00
  • 4c9de155ce upstream: new sentence, new line jsg@openbsd.org 2025-12-18 23:54:10 +00:00
  • 3ab346aa6d upstream: fix markup, .CM -> .Cm jsg@openbsd.org 2025-12-18 23:51:56 +00:00
  • f878d7ccc2 upstream: Plug leak in ssh_digest_memory on error path. dtucker@openbsd.org 2025-12-16 08:36:43 +00:00
  • 49480f1934 upstream: Add 'invaliduser' penalty to PerSourcePenalties, which is dtucker@openbsd.org 2025-12-16 08:32:50 +00:00
  • 94bf1154b4 upstream: add a GssDelegateCreds option for the server, controlling djm@openbsd.org 2025-12-08 03:55:22 +00:00
  • 24f32f7755 upstream: errant line djm@openbsd.org 2025-12-08 00:45:00 +00:00
  • a1e37f0998 upstream: There is a warning next to the authorized_keys command="" djm@openbsd.org 2025-12-08 00:44:16 +00:00
  • 70ad2e9a2b upstream: increment correct variable when counting group djm@openbsd.org 2025-12-08 00:41:46 +00:00
  • d05b704086 Add OpenBSD 7.8 VM test target. Darren Tucker 2025-12-07 20:10:42 +11:00
  • f086fafa04 Remove generated compat includes during distclean. Darren Tucker 2025-12-07 13:43:02 +11:00
  • 185459dd87 Define IPTOS_DSCP_VA if not already defined. Darren Tucker 2025-12-07 14:17:20 +11:00
  • f701869185 upstream: allow network programs select DSCP_VA for network ToS phessler@openbsd.org 2025-12-05 17:48:47 +00:00
  • f62868e03e upstream: Avoid "if ! thing || ! otherthing; then" constructs since dtucker@openbsd.org 2025-12-07 02:59:53 +00:00
  • 45aca67d79 upstream: spaces->tab dtucker@openbsd.org 2025-12-07 02:49:41 +00:00
  • ab164f6716 upstream: Append a newline, otherwise some sed's won't output anything. dtucker@openbsd.org 2025-12-06 07:10:24 +00:00
  • c99a30d30a upstream: Don't check compressions stats when ssh does not support dtucker@openbsd.org 2025-12-06 03:23:27 +00:00
  • 5f5d1af478 upstream: ASSERT_DOUBLE_* test helpers djm@openbsd.org 2025-12-05 11:13:35 +00:00
  • 70a01a7e66 Set SSH_REGRESS_TMP after making tmpdir. Darren Tucker 2025-12-05 20:02:39 +11:00
  • 89a67a04e5 upstream: Shell compatibility fix. dtucker@openbsd.org 2025-12-05 08:09:34 +00:00
  • f4e79a4ba9 upstream: unit tests for convtime_double() djm@openbsd.org 2025-12-05 07:43:24 +00:00
  • c48de35bea upstream: convert PerSourcePenalties to using floating point time, djm@openbsd.org 2025-12-05 07:49:45 +00:00
  • f45cd249e4 upstream: Add convtime_double() that converts a string interval, djm@openbsd.org 2025-12-05 07:43:12 +00:00
  • b7dc1d95ee upstream: Add test for ssh -Oconninfo mux command. dtucker@openbsd.org 2025-12-05 06:55:22 +00:00
  • eb97fc2b5e upstream: Add an ssh -Oconninfo command dtucker@openbsd.org 2025-12-05 06:16:27 +00:00
  • 66622394fd upstream: correctly quote filenames in verbose output for local->local djm@openbsd.org 2025-12-03 06:29:50 +00:00
  • 8fce5520a1 upstream: Add local hostname and pid to ~I escape connection info, dtucker@openbsd.org 2025-11-29 06:49:56 +00:00
  • 2e8b5de4a7 upstream: Add compression stats to ~I connection info escape dtucker@openbsd.org 2025-11-29 05:00:50 +00:00
  • 52037ed910 upstream: Add Escape option ~I that shows information about the current dtucker@openbsd.org 2025-11-27 02:18:48 +00:00
  • 0fb1f3c995 upstream: move mention of default MaxStartups (which uses the djm@openbsd.org 2025-11-25 01:14:33 +00:00
  • 2d0d26602f upstream: Support writing ED25519 keys in PKCS8 format. GHPR570 from djm@openbsd.org 2025-11-25 01:08:35 +00:00
  • c23122c5ea upstream: avoid leak of fingerprint on error path; from Lidong Yan via djm@openbsd.org 2025-11-25 00:57:04 +00:00
  • 6157e1c410 upstream: don't set the PerSourceNetBlockSize IPv6 mask if sscanf djm@openbsd.org 2025-11-25 00:52:00 +00:00
  • 1fdc3c6119 upstream: give ssh-agent more time to start in tests; requested in djm@openbsd.org 2025-11-24 23:56:58 +00:00
  • 5e7c3f33b2 upstream: When testing PKCS11, explicitly allow the module path in djm@openbsd.org 2025-11-24 23:54:15 +00:00
  • 69965aefe3 upstream: When loading FIDO2 resident keys, set the comment to the djm@openbsd.org 2025-11-24 23:43:10 +00:00
  • 2238c48dc9 upstream: pkcs11_fetch_ecdsa_pubkey: use ASN1_STRING accessors tb@openbsd.org 2025-11-23 07:04:18 +00:00
  • 643222df68 Update OSSFuzz link to current bug tracker. Darren Tucker 2025-11-21 14:28:20 +11:00
  • 2efdfbb4d7 Add VM CI and CIFuzz status badges. Darren Tucker 2025-11-21 14:21:07 +11:00
  • 71e8779113 upstream: unit tests for sshbuf_get_nulterminated_string() djm@openbsd.org 2025-11-21 01:29:27 +00:00
  • dec6334aaf upstream: add a sshbuf_get_nulterminated_string() function to pull a djm@openbsd.org 2025-11-21 01:29:06 +00:00
  • a8718c3fc5 upstream: Free opts in FAIL_TEST. It should always be NULL anyway so dtucker@openbsd.org 2025-11-20 05:07:57 +00:00
  • d68d528fef upstream: Plug leaks while parsing Match blocks. Coverity CID dtucker@openbsd.org 2025-11-20 05:10:56 +00:00
  • e3f1fbb427 upstream: Plug leaks while parsing Match blocks. Coverity CID dtucker@openbsd.org 2025-11-20 05:10:11 +00:00
  • ccad76e9e1 Pull in rev 1.17 for spelling fix. Darren Tucker 2025-11-18 20:14:44 +11:00
  • 58533bbdf7 upstream: Export XDG_RUNTIME_DIR to child ssh sessions jca@openbsd.org 2025-11-17 12:59:29 +00:00
  • e4cc5ab0ef upstream: don't strnvis() log messages that are going to be logged djm@openbsd.org 2025-11-17 05:24:42 +00:00
  • bad220decb Remove obsolete CVSID. Darren Tucker 2025-11-17 21:36:45 +11:00
  • 2fe6e406b4 upstream: Ensure both sides of the test are non-NULL instead of just dtucker@openbsd.org 2025-11-17 09:59:13 +00:00
  • c8f6f3808a Pull fixed yaml from master. github/V_10_2 github-selfhosted/V_10_2 anongit/V_10_2 V_10_2 Damien Miller 2025-11-07 15:42:57 +11:00
  • e2b93e1623 Move libcrypto init check into entropy.c. Darren Tucker 2025-11-13 23:30:48 +11:00
  • cb41e63c65 seccomp sandbox: allow uname(3) Icenowy Zheng 2025-11-07 14:27:35 +08:00
  • ec41739bd6 seccomp sandbox: allow uname(3) Icenowy Zheng 2025-11-07 14:27:35 +08:00
  • 90501bc30c Remove remaining OpenSSL_add_all_algorithms() calls. Darren Tucker 2025-11-13 22:04:19 +11:00
  • d9955e4571 upstream: Remove calls to OpenSSL_add_all_algorithms() dtucker@openbsd.org 2025-11-13 10:35:14 +00:00
  • 6aba7008e6 upstream: sync support for systems that lack __builtin_popcount() from djm@openbsd.org 2025-11-13 05:13:06 +00:00
  • 84347d67ad upstream: update our ML-KEM implementation to upstream libcrux djm@openbsd.org 2025-11-13 04:56:23 +00:00
  • c09eeba78a upstream: sshkey_ec_validate_public: zap trailing blank I missed on tb@openbsd.org 2025-11-07 06:29:45 +00:00
  • 7cb3ea4dcc Simplify git command to avoid yaml syntax error. Darren Tucker 2025-11-13 10:23:45 +11:00
  • 08786bbe7e Don't use OpenSSL's ed25519 if built without EC. Darren Tucker 2025-11-13 09:53:17 +11:00
  • d128133144 octal-escape the colon character Damien Miller 2025-11-07 15:49:55 +11:00
  • 5a104d81a2 try single quotes instead of escaped quotes Damien Miller 2025-11-07 15:44:18 +11:00
  • 48d8293956 escape quotes in yaml Damien Miller 2025-11-07 15:42:57 +11:00
  • 1f1d63e16b upstream: Escape SSH_AUTH_SOCK paths that are sent to the shell as djm@openbsd.org 2025-11-07 04:33:52 +00:00
  • 5794f2a186 upstream: sk-dummy.so needs sshlog() stub after ed25519-openssl.c djm@openbsd.org 2025-11-06 17:24:28 +00:00
  • a1c526f29b upstream: unit test for stringlist_append() and stringlist_free() djm@openbsd.org 2025-11-06 01:33:26 +00:00
  • 9d8c686981 upstream: link against ed25519-openssl.c instead of ed25519.c djm@openbsd.org 2025-11-06 01:33:03 +00:00
  • e57ef43c3e upstream: Cope with recent changes and don't link hash.c. anton@openbsd.org 2025-11-01 05:39:25 +00:00
  • 9bea081888 upstream: Remove some unnecessary checks in djm@openbsd.org 2025-11-07 04:11:59 +00:00
  • 1399419f0b upstream: move stringlist_append() and stringlist_free() to misc.c djm@openbsd.org 2025-11-06 01:31:11 +00:00
  • f2ff1d9c16 upstream: cleanup file descriptors across PKCS#11 client/helper djm@openbsd.org 2025-10-31 01:50:43 +00:00
  • 01a5bfdd41 Support using git for OpenBSD src tree tests. Darren Tucker 2025-11-01 08:34:15 +11:00
  • 6ea3242de3 Add OpenBSD 7.8 test target. Darren Tucker 2025-11-01 08:33:07 +11:00
  • af56d5cf96 Update LibreSSL versions and add 4.2.0. Darren Tucker 2025-10-20 18:29:24 +11:00
  • 7e5d404cf7 Support using git for OpenBSD src tree tests. Darren Tucker 2025-11-01 08:34:15 +11:00
  • d87e7f0bed Add OpenBSD 7.8 test target. Darren Tucker 2025-11-01 08:33:07 +11:00
  • 876a7d2a12 check PAM user against previous user, not pw_name Damien Miller 2025-10-31 13:47:49 +11:00
  • 2425d7faf4 check PAM user against previous user, not pw_name Damien Miller 2025-10-31 13:47:49 +11:00
  • 7e2f89b0fb skip pkcs11 tests when built --without-openssl Damien Miller 2025-10-31 12:19:47 +11:00
  • 590a260f0b add sshlog() replacement to sk-dummy.so Damien Miller 2025-10-31 12:19:34 +11:00