#
816036f1 |
| 18-Oct-2020 |
djm@openbsd.org |
upstream: use the new variant log macros instead of prepending __func__ and appending ssh_err(r) manually; ok markus@ OpenBSD-Commit-ID: 1f14b80bcfa85414b2a1a6ff714fb5362687ace8
|
Revision tags: V_8_4_P1 |
|
#
287dc639 |
| 16-Jul-2020 |
djm@openbsd.org |
upstream: log error message for process_write() write failures OpenBSD-Commit-ID: f733d7b3b05e3c68967dc18dfe39b9e8fad29851
|
#
fc270baf |
| 22-Jun-2020 |
djm@openbsd.org |
upstream: better terminology for permissions; feedback & ok markus@ OpenBSD-Commit-ID: ffb220b435610741dcb4de0e7fc68cbbdc876d2c
|
Revision tags: V_8_3_P1, V_8_2_P1, V_8_1_P1 |
|
#
569b650f |
| 05-Jul-2019 |
djm@openbsd.org |
upstream: add a local implementation of BSD realpath() for sftp-server use ahead of OpenBSD's realpath changing to match POSIX; ok deraadt@ (thanks for snaps testing) OpenB
upstream: add a local implementation of BSD realpath() for sftp-server use ahead of OpenBSD's realpath changing to match POSIX; ok deraadt@ (thanks for snaps testing) OpenBSD-Commit-ID: 4f8cbf7ed8679f6237264301d104ecec64885d55
show more ...
|
#
4d28fa78 |
| 28-Jun-2019 |
deraadt@openbsd.org |
upstream: When system calls indicate an error they return -1, not some arbitrary value < 0. errno is only updated in this case. Change all (most?) callers of syscalls to follow this be
upstream: When system calls indicate an error they return -1, not some arbitrary value < 0. errno is only updated in this case. Change all (most?) callers of syscalls to follow this better, and let's see if this strictness helps us in the future. OpenBSD-Commit-ID: 48081f00db7518e3b712a49dca06efc2a5428075
show more ...
|
#
0323d9b6 |
| 06-Jun-2019 |
otto@openbsd.org |
upstream: Replace calls to ssh_malloc_init() by a static init of malloc_options. Prepares for changes in the way malloc is initialized. ok guenther@ dtucker@ OpenBSD-Commit-ID:
upstream: Replace calls to ssh_malloc_init() by a static init of malloc_options. Prepares for changes in the way malloc is initialized. ok guenther@ dtucker@ OpenBSD-Commit-ID: 154f4e3e174f614b09f792d4d06575e08de58a6b
show more ...
|
Revision tags: V_8_0_P1 |
|
#
dbbc7e0e |
| 16-Jan-2019 |
djm@openbsd.org |
upstream: add support for a "lsetstat@openssh.com" extension. This replicates the functionality of the existing SSH2_FXP_SETSTAT operation but does not follow symlinks. Based on a patch
upstream: add support for a "lsetstat@openssh.com" extension. This replicates the functionality of the existing SSH2_FXP_SETSTAT operation but does not follow symlinks. Based on a patch from Bert Haverkamp in bz#2067 but with more attribute modifications supported. ok markus@ dtucker@ OpenBSD-Commit-ID: f7234f6e90db19655d55d936a115ee4ccb6aaf80
show more ...
|
#
5bed70af |
| 01-Jan-2019 |
djm@openbsd.org |
upstream: static on global vars, const on handler tables that contain function pointers; from Mike Frysinger OpenBSD-Commit-ID: 7ef2305e50d3caa6326286db43cf2cfaf03960e0
|
Revision tags: V_7_9_P1, V_7_8_P1 |
|
#
9c935dd9 |
| 31-May-2018 |
djm@openbsd.org |
upstream: make UID available as a %-expansion everywhere that the username is available currently. In the client this is via %i, in the server %U (since %i was already used in the client
upstream: make UID available as a %-expansion everywhere that the username is available currently. In the client this is via %i, in the server %U (since %i was already used in the client in some places for this, but used for something different in the server); bz#2870, ok dtucker@ OpenBSD-Commit-ID: c7e912b0213713316cb55db194b3a6415b3d4b95
show more ...
|
Revision tags: V_7_7_P1, V_7_6_P1 |
|
#
4d827f0d |
| 03-Apr-2017 |
djm@openbsd.org |
upstream commit disallow creation (of empty files) in read-only mode; reported by Michal Zalewski, feedback & ok deraadt@ Upstream-ID: 5d9c8f2fa8511d4ecf95322994ffe73e9283899b
|
Revision tags: V_7_5_P1, V_7_4_P1 |
|
#
9136ec13 |
| 11-Sep-2016 |
deraadt@openbsd.org |
upstream commit Add MAXIMUM(), MINIMUM(), and ROUNDUP() to misc.h, then use those definitions rather than pulling <sys/param.h> and unknown namespace pollution. ok djm markus dtucker
upstream commit Add MAXIMUM(), MINIMUM(), and ROUNDUP() to misc.h, then use those definitions rather than pulling <sys/param.h> and unknown namespace pollution. ok djm markus dtucker Upstream-ID: 712cafa816c9f012a61628b66b9fbd5687223fb8
show more ...
|
Revision tags: V_7_3_P1 |
|
#
0fb7f598 |
| 09-Jun-2016 |
Darren Tucker |
Move prctl PR_SET_DUMPABLE into platform.c. This should make it easier to add additional platform support such as Solaris (bz#2584).
|
Revision tags: V_7_2_P2, V_7_2_P1 |
|
#
ffb1e7e8 |
| 15-Feb-2016 |
dtucker@openbsd.org |
upstream commit Add a function to enable security-related malloc_options. With and ok deraadt@, something similar has been in the snaps for a while. Upstream-ID: 43a95523b832b
upstream commit Add a function to enable security-related malloc_options. With and ok deraadt@, something similar has been in the snaps for a while. Upstream-ID: 43a95523b832b7f3b943d2908662191110c380ed
show more ...
|
Revision tags: V_7_1_P2 |
|
#
4626cbaf |
| 07-Jan-2016 |
Damien Miller |
Support Illumos/Solaris fine-grained privileges Includes a pre-auth privsep sandbox and several pledge() emulations. bz#2511, patch by Alex Wilson. ok dtucker@
|
#
db6f8dc5 |
| 16-Nov-2015 |
logan@openbsd.org |
upstream commit 1) Use xcalloc() instead of xmalloc() to check for potential overflow. (Feedback from both mmcc@ and djm@) 2) move set_size just before the for loop. (suggested
upstream commit 1) Use xcalloc() instead of xmalloc() to check for potential overflow. (Feedback from both mmcc@ and djm@) 2) move set_size just before the for loop. (suggested by djm@) OK djm@ Upstream-ID: 013534c308187284756c3141f11d2c0f33c47213
show more ...
|
Revision tags: V_7_1_P1 |
|
#
ce445b0e |
| 20-Aug-2015 |
deraadt@openbsd.org |
upstream commit Do not cast result of malloc/calloc/realloc* if stdlib.h is in scope ok krw millert Upstream-ID: 5e50ded78cadf3841556649a16cc4b1cb6c58667
|
Revision tags: V_7_0_P1, V_6_9_P1 |
|
#
657a5fbc |
| 23-Apr-2015 |
deraadt@openbsd.org |
upstream commit rename xrealloc() to xreallocarray() since it follows that form. ok djm
|
#
202d443e |
| 15-Apr-2015 |
Darren Tucker |
Remove duplicate include of pwd.h. bz#2337, patch from Mordy Ovits.
|
Revision tags: V_6_8_P1 |
|
#
087266ec |
| 20-Jan-2015 |
deraadt@openbsd.org |
upstream commit Reduce use of <sys/param.h> and transition to <limits.h> throughout. ok djm markus
|
#
83b9678a |
| 14-Jan-2015 |
Damien Miller |
fix merge botch
|
#
7d845f4a |
| 14-Jan-2015 |
djm@openbsd.org |
upstream commit update sftp client and server to new buffer API. pretty much just mechanical changes; with & ok markus
|
Revision tags: V_6_7_P1 |
|
#
9c1dede0 |
| 23-Aug-2014 |
Damien Miller |
- (djm) [sftp-server.c] Some systems (e.g. Irix) have prctl() but not PR_SET_DUMPABLE, so adjust ifdef; reported by Tom Christensen
|
#
14928b74 |
| 31-Mar-2014 |
Damien Miller |
- (djm) On platforms that support it, use prctl() to prevent sftp-server from accessing /proc/self/{mem,maps}; patch from jann AT thejh.net
|
Revision tags: V_6_6_P1, V_6_5_P1 |
|
#
2aca159d |
| 18-Jan-2014 |
Darren Tucker |
- dtucker@cvs.openbsd.org 2014/01/17 06:23:24 [sftp-server.c] fix log message statvfs. ok djm
|
Revision tags: V_6_4_P1 |
|
#
f29238e6 |
| 16-Oct-2013 |
Damien Miller |
- djm@cvs.openbsd.org 2013/10/17 00:30:13 [PROTOCOL sftp-client.c sftp-client.h sftp-server.c sftp.1 sftp.c] fsync@openssh.com protocol extension for sftp-server client sup
- djm@cvs.openbsd.org 2013/10/17 00:30:13 [PROTOCOL sftp-client.c sftp-client.h sftp-server.c sftp.1 sftp.c] fsync@openssh.com protocol extension for sftp-server client support to allow calling fsync() faster successful transfer patch mostly by imorgan AT nas.nasa.gov; bz#1798 "fine" markus@ "grumble OK" deraadt@ "doesn't sound bad to me" millert@
show more ...
|