Disable sntrup761 if compiler doesn't support VLAs.

The sntrup761 code sourced from supercop uses variable length
arrays. Although widely supported, they are not part of the ANSI
C89 spec so if the

Disable sntrup761 if compiler doesn't support VLAs.

The sntrup761 code sourced from supercop uses variable length
arrays. Although widely supported, they are not part of the ANSI
C89 spec so if the compiler does not support VLAs, disable the
sntrup761x25519-sha512@openssh.com KEX method by replacing the kex
functions with no-op ones similar to what we do in kexecdh.c.

This should allow OpenSSH to build with a plain C89 compiler again.
Spotted by tim@, ok djm@.

show more ...

Remove HAVE_MMAP and BROKEN_MMAP

BROKEN_MMAP is no longer defined since commit
1cfd5c06efb12 ("Remove portability support for mmap")

this commit also removed other HAVE_MMAP user. I didn't find

Remove HAVE_MMAP and BROKEN_MMAP

BROKEN_MMAP is no longer defined since commit
1cfd5c06efb12 ("Remove portability support for mmap")

this commit also removed other HAVE_MMAP user. I didn't find anything
that defines HAVE_MMAP. The check does not trigger because compression
on server side is by default COMP_DELAYED (2) so it never triggers.

Remove remaining HAVE_MMAP and BROKEN_MMAP bits.

Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>

show more ...

Use LONG_LONG_MAX and friends if available.

If we don't have LLONG_{MIN,MAX} but do have LONG_LONG_{MIN,MAX}
then use those instead. We do calculate these values in configure,
but it turns out that

Use LONG_LONG_MAX and friends if available.

If we don't have LLONG_{MIN,MAX} but do have LONG_LONG_{MIN,MAX}
then use those instead. We do calculate these values in configure,
but it turns out that at least one compiler (old HP ANSI C) can't
parse "-9223372036854775808LL" without mangling it. (It can parse
"-9223372036854775807LL" which is presumably why its limits.h defines
LONG_LONG_MIN as the latter minus 1.)

Fixes rekey test when compiled with the aforementioned compiler.

show more ...

Check if UINT32_MAX is defined before redefining.

compat for missing IPTOS_DSCP_LE in system headers

Move definition of UINT32_MAX.

This allows us to always define it if needed not just if we also
define the type ourself.

Add SSIZE_MAX when we define ssize_t.

Define UINT32_MAX if needed.

Make DEF_WEAK more likely to be correct.

Completely nop-ing out DEF_WEAK leaves an empty statemment which some
compilers don't like. Replace with a no-op function template. ok djm@

Add more ToS bits, currently only used by netcat.

remove realpath() compat replacement

We shipped a BSD implementation of realpath() because sftp-server
depended on its behaviour.

OpenBSD is now moving to a more strictly POSIX-compliant realpath(2

remove realpath() compat replacement

We shipped a BSD implementation of realpath() because sftp-server
depended on its behaviour.

OpenBSD is now moving to a more strictly POSIX-compliant realpath(2),
so sftp-server now unconditionally requires its own BSD-style realpath
implementation. As such, there is no need to carry another independant
implementation in openbsd-compat.

ok dtucker@

show more ...

Remove support for S/Key

Most people will 1) be using modern multi-factor authentication methods
like TOTP/OATH etc and 2) be getting support for multi-factor
authentication via PAM or BSD Auth.

Remove UNICOS support.

The code required to support it is quite invasive to the mainline
code that is synced with upstream and is an ongoing maintenance burden.
Both the hardware and software are li

Remove UNICOS support.

The code required to support it is quite invasive to the mainline
code that is synced with upstream and is an ongoing maintenance burden.
Both the hardware and software are literal museum pieces these days and
we could not find anyone still running OpenSSH on one.

show more ...

portability for sftp globbed ls sort by mtime

Include replacement timespeccmp() for systems that lack it.
Support time_t struct stat->st_mtime in addition to
timespec stat->st_mtim, as well as unsor

portability for sftp globbed ls sort by mtime

Include replacement timespeccmp() for systems that lack it.
Support time_t struct stat->st_mtime in addition to
timespec stat->st_mtim, as well as unsorted fallback.

show more ...

Define INT32_MAX and INT64_MAX if needed.

Move DEF_WEAK into defines.h.

As well pull in more recent changes from OpenBSD these will start to
arrive so put it where the definition is shared.

Remove obsolete CVS $Id from source files.

Since -portable switched to git the CVS $Id tags are no longer being
updated and are becoming increasingly misleading. Remove them.

Move Cygwin IPPORT_RESERVED overrride to defines.h

Patch from vinschen at redhat.com.

Prevent name collisions with system glob (bz#2463)

Move glob.h from includes.h to the only caller (sftp) and override the
names for the symbols. This prevents name collisions with the system glob
i

Prevent name collisions with system glob (bz#2463)

Move glob.h from includes.h to the only caller (sftp) and override the
names for the symbols. This prevents name collisions with the system glob
in the case where something other than ssh uses it (eg kerberos). With
jjelen at redhat.com, ok djm@

show more ...

Revert "define __unused to nothing if not already defined"

This reverts commit 1598419e38afbaa8aa5df8dd6b0af98301e2c908.

Some system headers have objects named __unused

define __unused to nothing if not already defined

fixes builds on BSD/OS

Move definition of _NSIG.

_NSIG is only unsed in one file, so move it there prevent redefinition
warnings reported by Kevin Brott.

include netdb.h to look for MAXHOSTNAMELEN; ok tim

portability fix: if we can't dind a better define for HOST_NAME_MAX, use 255

More correct checking of HAVE_DECL_AI_NUMERICSERV.