Commit Graph

  • 725fecd4cc defatal rsa.[ch] Damien Miller 2012-09-19 05:03:02 +10:00
  • 2a99b71b39 Include CRC compensation attack detector in per-transport state structure Damien Miller 2012-09-18 01:17:30 +10:00
  • fbbec84071 sync to cvs as of 2012-09-14 Markus Friedl 2012-09-14 18:59:11 +02:00
  • e3403f3457 update to openssh-6.1 Markus Friedl 2012-07-30 20:41:29 +02:00
  • 41aac846f1 objdump -rd *.o | objdump2.pl -b asn1_d2i_read_bio | dot -Tpdf > asn1_d2i_read_bio.pdf Markus Friedl 2012-04-26 11:12:31 +02:00
  • 8ed0e3c614 treat all PEM_read_bio_PrivateKey() errors as SSH_ERR_KEY_WRONG_PASSPHRASE Markus Friedl 2012-04-06 14:08:12 +02:00
  • 19d6c6ae8b do not leak existing comment Markus Friedl 2012-03-27 20:43:01 +02:00
  • 0de3e0e043 set BT_MAX_DEPTH for older versions of libexecinfo Markus Friedl 2012-03-23 18:56:09 +01:00
  • bdc1f63423 fixes - bad message format in ssh_decrypt_challenge(), missing break in ssh_add_identity_constrained() Damien Miller 2012-03-27 09:43:50 +11:00
  • 4cc6b3c6c5 more verbosity on errors Damien Miller 2012-03-27 09:43:20 +11:00
  • a40866a6be hush warnings for certificate loading if file is not present Damien Miller 2012-03-27 09:42:55 +11:00
  • fab052172d fixes from Markus Damien Miller 2012-03-27 08:57:21 +11:00
  • e237a835f2 gracefully skip unrecognised key types Damien Miller 2012-03-26 23:23:34 +11:00
  • 2c25fb2ede refactor agent client code Damien Miller 2012-03-26 23:10:27 +11:00
  • 67ce107972 sshbuf_free(NULL) should be a no-op Damien Miller 2012-03-26 17:04:40 +11:00
  • 44e5c0f6b2 memory leak in cert_free() Damien Miller 2012-03-21 10:56:06 +11:00
  • d403adfa35 fuzz certificate parsing Damien Miller 2012-03-15 16:26:01 +11:00
  • 3f5b354ed7 test certificate loading Damien Miller 2012-03-15 16:25:50 +11:00
  • cc51f0e811 fix free of uninitialised pointer; found by fuzzer Damien Miller 2012-03-15 16:15:41 +11:00
  • 3a5cb4965b correct test names: s/RSA/RSA1 for a few Damien Miller 2012-03-15 15:37:19 +11:00
  • 0caf1913c7 allow KEY_UNSPEC in sshkey_load_private_cert() Damien Miller 2012-03-15 15:32:15 +11:00
  • e0e7ddfa4a xmalloc.h not needed here Damien Miller 2012-03-15 14:32:27 +11:00
  • 3f69ecb299 activate leakmalloc support when LEAKMALLOC make variable is set (mostly by markus@) Damien Miller 2012-03-15 13:27:43 +11:00
  • dfecc980bc Merge branch 'master' of /home/djm/cvs/leakmalloc into merge-leakmalloc Damien Miller 2012-03-15 12:24:27 +11:00
  • 6161ebb123 move everything into subdirectory in preparation for merge to libopenssh Damien Miller 2012-03-15 12:23:01 +11:00
  • 4e552cbf80 adjust for new paths Damien Miller 2012-03-07 15:34:41 +11:00
  • 70606ded9d make into a proper regress test Damien Miller 2012-03-07 14:45:38 +11:00
  • de82036ecf rename example.c => leaky.c Damien Miller 2012-03-07 14:45:00 +11:00
  • e41307b545 add some options via LEAKMALLOC_OPTIONS environment Damien Miller 2012-03-07 14:43:11 +11:00
  • fed32729da reorg directory structure Damien Miller 2012-03-07 14:42:34 +11:00
  • 989d187309 improve summary Damien Miller 2012-03-07 14:39:30 +11:00
  • 077cbaa855 don't leak the test keys and the kex after deserialize Markus Friedl 2012-03-06 14:06:12 +01:00
  • 9fb8cdc7bd free the session id and version strings in kex_free() Markus Friedl 2012-03-06 14:06:12 +01:00
  • faaf51919a free the internal state in ssh_packet_close() Markus Friedl 2012-03-06 14:06:12 +01:00
  • 9e7303d250 don't leak the hostkey-list in ssh_free() ... Markus Friedl 2012-03-06 14:06:12 +01:00
  • 4a3c3a7baf fix some kex-related leaks Damien Miller 2012-03-05 18:04:51 +11:00
  • 06cbafed01 add a "quiet" mode, activated by -q, that prints nothing to stdout Damien Miller 2012-03-05 14:57:53 +11:00
  • bdf8ba65b2 memory leaks in fingerprint tests Damien Miller 2012-03-05 14:57:23 +11:00
  • 52f8dc5221 memory leak in test Damien Miller 2012-03-05 14:57:05 +11:00
  • 4364319ce2 oops, sshbuf was never freeing its buffer memory Damien Miller 2012-03-05 14:56:26 +11:00
  • b921712025 centralise error handling for sshkey_from_blob, fix leak Damien Miller 2012-03-05 14:55:45 +11:00
  • bac1cfe229 make output useful as vim error file, based on patch from markus@ Damien Miller 2012-03-07 08:24:20 +11:00
  • dadde6f62b print totals Damien Miller 2012-03-05 17:51:14 +11:00
  • 4254638087 better comment Damien Miller 2012-03-05 16:50:27 +11:00
  • f9e93c4b64 README Damien Miller 2012-03-05 15:08:59 +11:00
  • 9570b61230 add example Damien Miller 2012-03-05 15:04:45 +11:00
  • 776483fdf5 fix tracking bugs, kludge to dump backtrace on error Damien Miller 2012-03-05 14:44:45 +11:00
  • f07479d57c ensure malloc() and friends are in the namespace Damien Miller 2012-03-05 14:44:32 +11:00
  • 2d05fae6fe sort by number of leaks, then by bytes Damien Miller 2012-03-05 14:44:09 +11:00
  • b9fc9037a9 tool to resolve leak dumps to nicer reports using addr2line Damien Miller 2012-03-05 13:23:31 +11:00
  • 242ddf1724 simple leak tracer, using libexecinfo Damien Miller 2012-03-05 12:11:29 +11:00
  • becc57491f ssh_set_app_data(): attach application specific data to 'struct ssh' Markus Friedl 2012-03-01 15:13:37 +01:00
  • a9b5c1feef replace ssh_packet_payload() with sshpkt_ptr(); adapt ssh_packet_payload() Markus Friedl 2012-02-26 12:07:59 +01:00
  • b8e9499508 ssh_api.h: u_int -> size_t Markus Friedl 2012-02-26 11:59:55 +01:00
  • 1ba4f6ae7d ssh-proxy: use sshbuf_dump() and print hex-dump of forwarded packet Markus Friedl 2012-02-26 11:48:29 +01:00
  • 980b0a0f16 ssh-proxy: delay session close until the output is flushed Markus Friedl 2012-02-26 11:42:15 +01:00
  • fbeeedc2c2 print protocol mismatch message if version exchange fails Markus Friedl 2012-02-23 14:33:08 +01:00
  • 6e99587584 remove redundant ssh->compat assignment Markus Friedl 2012-02-22 00:40:25 +01:00
  • e9505646d7 terminate the buffer for the remote protocol version; interop w/JSch Markus Friedl 2012-02-21 17:51:40 +01:00
  • f7ecade3a0 make sshbuf_get_stringb() a public API Markus Friedl 2012-02-21 02:51:09 +01:00
  • cbf6120318 add a kex unit test Markus Friedl 2012-02-21 02:45:37 +01:00
  • ef966564df zero *kexp in kex_from_blob() Markus Friedl 2012-02-20 18:52:59 +01:00
  • cfa5a3fa83 kex_from_blob(): don't leak the kex on error Markus Friedl 2012-02-20 05:23:43 +01:00
  • 38c47bf56b add alternate Makefile for ssh-proxy (w/o linking libssh.a) Markus Friedl 2012-02-20 00:45:41 +01:00
  • 43a81ccd73 make get_remote_ipaddr() per-connection and move it to ssh_remote_ipaddr() Markus Friedl 2012-02-19 23:38:46 +01:00
  • eb30492538 cipher-bf1.c and mac.c no longer use log.h/xmalloc.h Markus Friedl 2012-02-19 23:03:57 +01:00
  • b039f2339c don't make packet.c depend on the channels.c code Markus Friedl 2012-02-19 22:59:10 +01:00
  • 95ba2fbfe0 add reallocn() (==xrealloc w/o fatal), use it in deattack.c Markus Friedl 2012-02-29 14:54:40 +01:00
  • 91f929fc6f de-fatal deattack and use sshbuf.h instead of misc.c Markus Friedl 2012-02-19 21:28:14 +01:00
  • 06f25e6dee de-fatal ciphers Markus Friedl 2012-02-19 19:04:33 +01:00
  • 7d063a0c7d de-fatal addrmatch.c Markus Friedl 2012-02-19 18:37:46 +01:00
  • f42361df22 de-fatal mac.c Markus Friedl 2012-02-19 18:33:16 +01:00
  • c0941f9d24 de-fatal ssh-proxy.c Markus Friedl 2012-02-19 18:30:54 +01:00
  • f8339e5505 de-fatal state serialisation and remove obsolete state-functions Markus Friedl 2012-02-14 20:31:21 +01:00
  • 63e255807e move packet state serialisation from monitor to packet.c Markus Friedl 2012-02-14 00:41:18 +01:00
  • d19d229054 flesh out sshkey tests substantially Damien Miller 2012-02-29 22:28:30 +11:00
  • 0fe974bd62 expose sshkey_parse_public_rsa1() for unit testing Damien Miller 2012-02-29 21:19:38 +11:00
  • 39c4aec751 support for fuzzing base64 files Damien Miller 2012-02-29 21:10:45 +11:00
  • 57d23bd234 support for multiple fuzz strategies in a single invocation Damien Miller 2012-02-29 20:51:21 +11:00
  • c978fa80fc fuzz support fixes Damien Miller 2012-02-29 15:07:11 +11:00
  • ef27482cc7 missed a s/fuzz_buf/fuzz_ptr/ Damien Miller 2012-02-29 14:39:32 +11:00
  • 256e902fe1 match sshbuf naming for fuzz methods Damien Miller 2012-02-29 14:38:50 +11:00
  • 38fe458892 hook in all the tests Damien Miller 2012-02-29 14:27:26 +11:00
  • 9b0034eeaf fix parameter extraction Damien Miller 2012-02-29 14:27:11 +11:00
  • 0bececbb60 Basic fuzzing framework Damien Miller 2012-02-29 14:26:02 +11:00
  • 30c2bb48b9 matching constification of arguments Damien Miller 2012-02-29 14:23:37 +11:00
  • 044fea56f4 constify arguments Damien Miller 2012-02-29 14:15:43 +11:00
  • 222ddc9e44 basic unittests for authfile.c pub/private key loading Damien Miller 2012-02-25 17:39:48 +11:00
  • 5853fac4dc ssh-add: fix calls to sshkey_parse_private(), passphrase before filename Markus Friedl 2012-02-29 10:59:06 +01:00
  • 79061f1d6e signed/unsigned comparison Damien Miller 2012-02-20 10:22:44 +11:00
  • 37f4c4a78f remove remaining xstrdup from sshkey_try_load_public() Markus Friedl 2012-02-17 10:49:33 +01:00
  • ff45a11b5a fix re-try for files with .pub suffix (e.g. for cert tests or encrypted private keys) Markus Friedl 2012-02-16 21:41:02 +01:00
  • 56b8e0979c fix rsa1 key loading and passphrase change Markus Friedl 2012-02-16 02:33:34 +01:00
  • 54fc03566d use sshkey_load_private in ssh-proxy Markus Friedl 2012-02-16 12:48:21 +01:00
  • 68cf42d1fe convert everything to new authfile.[ch] API Damien Miller 2012-02-14 22:56:28 +11:00
  • ce24556633 NULL *commentp in functions that take it Damien Miller 2012-02-14 22:25:14 +11:00
  • f576b5ee39 fixes from Markus Damien Miller 2012-02-14 21:50:16 +11:00
  • c412d88561 zero *keyp in each function that uses it Damien Miller 2012-02-14 21:48:01 +11:00
  • 24db83513f rework authfile.c to avoid fatal and return error codes Damien Miller 2012-02-13 22:29:11 +11:00
  • 60702a301e adapt sshbuf_dump test to new output format Markus Friedl 2012-02-15 11:01:22 +01:00