Add prototype for compat strndup.(bz#3032).

Include stdio.h for vsnprintf.

Patch from mforney at mforney.org.

upstream rev 1.27: fix integer overflow.

Cast bitcount to u_in64_t before bit shifting to prevent integer overflow
on 32bit platforms which cause incorrect results when adding a block

upstream rev 1.27: fix integer overflow.

Cast bitcount to u_in64_t before bit shifting to prevent integer overflow
on 32bit platforms which cause incorrect results when adding a block
>=512M in size. sha1 patch from ante84 at gmail.com via openssh github,
sha2 with djm@, ok tedu@

show more ...

upstream rev 1.25: add DEF_WEAK.

Wrap blowfish, sha*, md5, and rmd160 so that internal calls go direct
ok deraadt@

upstream rev 1.25: add sys/types.h

upstream: Use explicit_bzero instead of memset

in hash Final and End functions. OK deraadt@ djm@

Always clean up before and after utimensat test.

Update utimensat test.

POSIX specifies that when given a symlink, AT_SYMLINK_NOFOLLOW should
update the symlink and not the destination. The compat code doesn't
have a way to do thi

Update utimensat test.

POSIX specifies that when given a symlink, AT_SYMLINK_NOFOLLOW should
update the symlink and not the destination. The compat code doesn't
have a way to do this, so where possible it fails instead of following a
symlink when explicitly asked not to. Instead of checking for an explicit
failure, check that it does not update the destination, which both the
real and compat implmentations should honour.

Inspired by github pull req #125 from chutzpah at gentoo.org.

show more ...

Don't install duplicate STREAMS modules on Solaris

Check if STREAMS modules are already installed on pty before installing
since when compiling with XPG>=4 they will likely be installed

Don't install duplicate STREAMS modules on Solaris

Check if STREAMS modules are already installed on pty before installing
since when compiling with XPG>=4 they will likely be installed already.
Prevents hangs and duplicate lines on the terminal. bz#2945 and bz#2998,
patch from djm@

show more ...

Remove "struct ssh" from sys_auth_record_login.

It's not needed, and is not available from the call site in loginrec.c
Should only affect AIX, spotted by Kevin Brott.

Adapt custom_failed_login to new prototype.

Spotted by Kevin Brott.

Only use O_NOFOLLOW in fchownat and fchmodat if defined

Only use O_NOFOLLOW in utimensat if defined.

Fixes build on systems that don't have it (Solaris <=9) Found by
Tom G. Christensen.

Replace alloca with xcalloc.

The latter checks for memory exhaustion and integer overflow and may be
at a less predictable place. Sanity check by vinschen at redhat.com, ok
djm@

Use Cygwin-specific matching only for users+groups.

Patch from vinschen at redhat.com, updated a little by me.

Cygwin: implement case-insensitive Unicode user and group name matching

The previous revert enabled case-insensitive user names again. This
patch implements the case-insensitive user an

Cygwin: implement case-insensitive Unicode user and group name matching

The previous revert enabled case-insensitive user names again. This
patch implements the case-insensitive user and group name matching.
To allow Unicode chars, implement the matcher using wchar_t chars in
Cygwin-specific code. Keep the generic code changes as small as possible.
Cygwin: implement case-insensitive Unicode user and group name matching

Signed-off-by: Corinna Vinschen <vinschen@redhat.com>

show more ...

Revert unintended parts of previous commit.

Revert "[auth.c] On Cygwin, refuse usernames that have differences in case"

This reverts commit acc9b29486dfd649dfda474e5c1a03b317449f1c.

Signed-off-by: Corinna Vinschen <vinschen@r

Revert "[auth.c] On Cygwin, refuse usernames that have differences in case"

This reverts commit acc9b29486dfd649dfda474e5c1a03b317449f1c.

Signed-off-by: Corinna Vinschen <vinschen@redhat.com>

show more ...

Also undef SIMPLEQ_FOREACH_SAFE.

Prevents macro redefinition warning on at least NetBSD 6.1.

remove vestiges of old packet API from loginrec.c

Add minimal fchownat and fchmodat implementations.

Fixes builds on at least OS X Lion, NetBSD 6 and Solaris 10.

Add a minimal implementation of utimensat().

Some systems (eg older OS X) do not have utimensat, so provide minimal
implementation in compat layer. Fixes build on at least El Capitan.

Include stdio.h for FILE if needed.

Reverse order of OpenSSL init functions.

Try the new init function (OPENSSL_init_crypto) before falling back to
the old one (OpenSSL_add_all_algorithms).

refactor libcrypto initialisation

Don't call OpenSSL_add_all_algorithms() unless OpenSSL actually
supports it.

Move all libcrypto initialisation to a single function, and call t

refactor libcrypto initialisation

Don't call OpenSSL_add_all_algorithms() unless OpenSSL actually
supports it.

Move all libcrypto initialisation to a single function, and call that
from seed_rng() that is called early in each tool's main().

Prompted by patch from Rosen Penev

show more ...