upstream: restore blocking status on stdio fds before close

ssh(1) needs to set file descriptors to non-blocking mode to operate
but it was not restoring the original state on exit. This could cause

upstream: restore blocking status on stdio fds before close

ssh(1) needs to set file descriptors to non-blocking mode to operate
but it was not restoring the original state on exit. This could cause
problems with fds shared with other programs via the shell, e.g.

> $ cat > test.sh << _EOF
> #!/bin/sh
> {
> ssh -Fnone -oLogLevel=verbose ::1 hostname
> cat /usr/share/dict/words
> } | sleep 10
> _EOF
> $ ./test.sh
> Authenticated to ::1 ([::1]:22).
> Transferred: sent 2352, received 2928 bytes, in 0.1 seconds
> Bytes per second: sent 44338.9, received 55197.4
> cat: stdout: Resource temporarily unavailable

This restores the blocking status for fds 0,1,2 (stdio) before ssh(1)
abandons/closes them.

This was reported as bz3280 and GHPR246; ok dtucker@

OpenBSD-Commit-ID: 8cc67346f05aa85a598bddf2383fcfcc3aae61ce

show more ...

upstream: fix breakage of -W forwaring introduced in 1.554; reported by

naddy@ and sthen@, ok sthen@

OpenBSD-Commit-ID: f72558e643a26dc4150cff6e5097b5502f6c85fd

upstream: Regenerate moduli.

OpenBSD-Commit-ID: 83c93a2a07c584c347ac6114d6329b18ce515557

Handle Android libc returning NULL pw->pw_passwd

Reported by Luke Dashjr

upstream: fix previous: test saved no_shell_flag, not the one that just

got clobbered

OpenBSD-Commit-ID: b8deace085d9d941b2d02f810243b9c302e5355d

upstream: Fix ssh started with ControlPersist incorrectly executing a

shell when the -N (no shell) option was specified. bz3290 reported by Richard
Schwab; patch from markus@ ok me

OpenBSD-Commit-I

upstream: Fix ssh started with ControlPersist incorrectly executing a

shell when the -N (no shell) option was specified. bz3290 reported by Richard
Schwab; patch from markus@ ok me

OpenBSD-Commit-ID: ea1ea4af16a95687302f7690bdbe36a6aabf87e1

show more ...

upstream: Clarify language about moduli. While both ends of the

connection do need to use the same parameters (ie groups), the DH-GEX
protocol takes care of that and both ends do not need the same c

upstream: Clarify language about moduli. While both ends of the

connection do need to use the same parameters (ie groups), the DH-GEX
protocol takes care of that and both ends do not need the same contents in
the moduli file, which is what the previous text suggested. ok djm@ jmc@

OpenBSD-Commit-ID: f0c18cc8e79c2fbf537a432a9070ed94e96a622a

show more ...

upstream: include pid in LogVerbose spam

OpenBSD-Commit-ID: aacb86f96ee90c7cb84ec27452374285f89a7f00

upstream: don't sigdie() in signal handler in privsep child process;

this can end up causing sandbox violations per bz3286; ok dtucker@

OpenBSD-Commit-ID: a7f40b2141dca4287920da68ede812bff7ccfdda

upstream: Increase ConnectionAttempts from 4 to 10 as the tests

occasionally time out on heavily loaded hosts.

OpenBSD-Regress-ID: 29a8cdef354fc9da471a301f7f65184770434f3a

upstream: dump out a usable private key string too; inspired by Tyson

Whitehead

OpenBSD-Regress-ID: 65572d5333801cb2f650ebc778cbdc955e372058

upstream: correct mistake in spec - the private key blobs are encoded

verbatim and not as strings (i.e. no 4-byte length header)

OpenBSD-Commit-ID: 3606b5d443d72118c5b76c4af6dd87a5d5a4f837

upstream: Don't pass NULL as a string in debugging as it does not work

on some platforms in -portable. ok djm@

OpenBSD-Commit-ID: 937c892c99aa3c9c272a8ed78fa7c2aba3a44fc9

upstream: more debugging for UpdateHostKeys signature failures

OpenBSD-Commit-ID: 1ee95f03875e1725df15d5e4bea3e73493d57d36

Add obsd69 test target.

upstream: a little debugging in the main mux process for status

confirmation failures in multiplexed sessions

OpenBSD-Commit-ID: 6e27b87c95176107597035424e1439c3232bcb49

upstream: Remove now-unused skey function prototypes leftover from

skey removal.

OpenBSD-Commit-ID: 2fc36d519fd37c6f10ce74854c628561555a94c3

Wrap sntrup761x25519 inside ifdef.

From balu.gajjala at gmail.com via bz#3306.

Add status badges for Actions-based tests.

Add obsdsnap (OpenBSD snapshot) test target.

Add test building upstream OpenBSD source.

Test against OpenSSL 1.1.0h instead of 1.1.0g.

1.1.0g requires a perl glob module that's not installed by default.

Use the default VM type for libcrypto ver tests.

Always build OpenSSL shared.

This is the default for current versions but we need it to test against
earlier versions.

Fix custom OpenSSL tests.

Check out specified OpenSSL version. Install custom libcrypto where
configure expects to find it. Remove unneeded OpenSSL config time
options. Older OpenSSL versions wer

Fix custom OpenSSL tests.

Check out specified OpenSSL version. Install custom libcrypto where
configure expects to find it. Remove unneeded OpenSSL config time
options. Older OpenSSL versions were not make -j safe so remove it.

show more ...