aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2012-11-14Update ChangeLog.libssh-0.5.3Andreas Schneider1-0/+15
2012-11-14cmake: Bump version number.Andreas Schneider2-3/+3
2012-11-14CVE-2012-4561: Fix possible free's on invalid pointers.Andreas Schneider1-0/+5
2012-11-14CVE-2012-4561: Fix error handling of try_publickey_from_file().Andreas Schneider1-6/+6
2012-11-14CVE-2012-4559: Make sure we don't free name and longname twice on error.Andreas Schneider1-10/+16
2012-11-14CVE-2012-4559: Ensure that we don't free req twice.Andreas Schneider1-1/+1
2012-11-14CVE-2012-4559: Ensure we don't free blob or request twice.Andreas Schneider1-0/+2
2012-11-14CVE-2012-4560: Fix a write one past the end of 'buf'.Andreas Schneider1-2/+3
2012-11-14CVE-2012-4560: Fix a write one past the end of the 'u' buffer.Andreas Schneider1-1/+1
2012-11-14CVE-2012-4562: Fix possible string related integer overflows.Xi Wang1-7/+18
2012-11-14CVE-2012-4562: Fix a possible infinite loop in buffer_reinit().Andreas Schneider1-4/+9
If needed is bigger than the highest power of two or a which fits in an integer we will loop forever.
2012-11-14CVE-2012-4562: Fix multiple integer overflows in buffer-related functions.Xi Wang1-5/+15
2012-11-14CVE-2012-4562: Fix possible integer overflow in ssh_get_hexa().Xi Wang1-0/+4
No exploit known, but it is better to check the string length.
2012-10-22channels: Fix a possible infinite loop if the connection dropped.Andreas Schneider1-1/+3
This fixes bug #85.
2012-10-22channels1: Add missing request_state and set it to accepted.Andreas Schneider1-0/+1
This fixes bug #88.
2012-10-22auth1: Reset error state to no error.Andreas Schneider1-0/+1
This fixes bug #89.
2012-10-22session: Fix a possible use after free in ssh_free().Andreas Schneider1-15/+19
We need to cleanup the channels first cause we call ssh_channel_close() on the channels which still require a working socket and poll context. Thanks to sh4rm4!
2012-10-14doc: Update copyright policy.Andreas Schneider2-28/+198
2012-10-05channel: Fix a possible null pointer dereference.Andreas Schneider1-1/+6
(cherry picked from commit ceb8072b34a581eb72ed43f7f7ce78fd9b0ea708)
2012-10-05channels: Fix a possible null pointer dereference.Andreas Schneider1-1/+6
(cherry picked from commit 656fd60110b73b3fc56c8c407b12a68be7ca67ff)
2012-10-05getpass: Fix a memory leak in ssh_gets() on error.Andreas Schneider1-0/+1
(cherry picked from commit 6092596199e8ebfbbf6e6ba48b7ec6ca0d85fa13)
2012-10-05sftp: Harden sftp_extension_supported() against null pointers.Andreas Schneider1-2/+10
(cherry picked from commit 22f607649d7dc530df84b7b90781ce0b88153095)
2012-10-05sftp: Fix a memory on error in sftp_opendir().Andreas Schneider1-0/+1
(cherry picked from commit b5c4b090da254c1ad3689983b0cb999b09aa3394)
2012-10-05misc: Don't leak memory on ssh_path_expand_escape() on error.Andreas Schneider1-0/+4
(cherry picked from commit 61d032fc03e0055c859931f466bc75fbdf36385a)
2012-10-05session: Fix a memory leak in ssh_new() on error.Andreas Schneider1-0/+1
(cherry picked from commit 280ce3fe937c96899732814928c8ecfa9f9ae431)
2012-09-21Fix regression in pre-connected socket setting.Werner Koch3-8/+22
* src/socket.c (ssh_socket_pollcallback): Factor some code out to ... (ssh_socket_set_connecting): New. * include/libssh/socket.h (ssh_socket_set_connecting): Add prototype. * src/client.c (ssh_connect): Use new function for a socket set by SSH_OPTIONS_FD. Signed-off-by: Werner Koch <wk@gnupg.org> Signed-off-by: Andreas Schneider <asn@cryptomilk.org>
2012-07-17build: Fix missing struct in_addr warning.Andreas Schneider13-0/+13
(cherry picked from commit 782b2e37c6a4e0254e2b596b9182043c5ebabd75)
2012-07-17sftp: Fix bug in sftp_mkdir not returning on error.Andreas Schneider1-0/+1
resolves: #84 (cherry picked from commit a92c97b2e17715c1b3cdd693d14af6c3311d8e44)
2012-07-17connect: Fix a build warning.Andreas Schneider1-1/+1
(cherry picked from commit 8b8d9dc83af81dfaec22bbb6710083e79f00c470)
2012-01-02session: Cleanup timeout functions and fix packets termination.rofl0r3-34/+42
It is possible that we get unrelated packets while waiting for termination, thus waiting indefinitely. As a workaround we have to check the user-supplied timeout. Also cleaned up ssh_blocking_flush, which was using the timeout in a bogus manner (resetting the timeout after each check).
2012-01-02message: Fix compiler warning.Andreas Schneider1-1/+1
(cherry picked from commit 2f861a858be9f2fe1f55a0fbfc47d732e3b3b31b)
2012-01-01message: Handle all unknown global messages.rofl0r1-1/+4
Reply to unknown global messages as required by the RFC. Therefore keepalive@openssh.com style messages should get treated in a sane way.
2011-09-17keyfiles: Fix build errors with callbacks.Andreas Schneider1-5/+5
Introduced with the last commit.
2011-09-17Fixes the ssh_log issue on ssh_bind handles.Aris Adamantiadis13-64/+97
(cherry picked from commit da954c2c5ee85bcbe2f5ad9f507a6306b0f5f8b9) Conflicts: src/keyfiles.c
2011-09-17doc: Fix threading documentation.Andreas Schneider1-2/+2
(cherry picked from commit 2cc95e1e088553a94b0a8e07c458b1bc0a60d9b1)
2011-09-17Fix documentation bug about threadingAris Adamantiadis1-7/+7
(cherry picked from commit c84380bad55dba3cb06486dc7f19c0ea6705a060)
2011-09-16build: Increase version number.libssh-0.5.2Andreas Schneider3-4/+4
2011-09-16build: Updated changelog.Andreas Schneider1-0/+15
2011-09-15SSH1: handle exit-status message (channels would not close)Aris Adamantiadis3-1/+15
2011-09-15channels: don't send SSH2 packets on SSH1 !Aris Adamantiadis1-0/+7
2011-09-02SSH1: fix buildAris Adamantiadis3-12/+15
(cherry picked from commit 3eece8ac0b107a7df8d95325ef17ed19d6429e75) Conflicts: src/channels.c src/channels1.c
2011-09-02channels: replaced bugged lists with ssh_listAris Adamantiadis8-49/+60
(cherry picked from commit 6d8bb956c5caa48c2aba6713f067224650c3c1e1) Conflicts: src/channels.c src/session.c
2011-09-02poll: resolve use-after-free + inconsistent callbacks callAris Adamantiadis1-18/+3
This code was weird in the first place. I suspect my change will break something else (probably the appcode that needed it). ssh_poll_ctx_free is not a good place to send exception callbacks imho. (cherry picked from commit b5351f2809140921076ef54cc6092b543b5199d2)
2011-09-02Channels: increase window size x10Aris Adamantiadis1-1/+1
Provides me a 3x performance boost for async sftp, 5x for sync sftp (on localhost) (cherry picked from commit 17ae216340fea65edbfbb59789121e6e4af73f20)
2011-09-02channels: Fix bug #52.Andreas Schneider1-4/+15
(cherry picked from commit a2c94abb92ead1503a0d6284609af41e53bef402) Conflicts: src/channels.c
2011-09-02unittests:make sftp_dir pass on my laptopAris Adamantiadis2-0/+4
(cherry picked from commit 7363b29427023bb2bbcec0bb1783e869015ff664)
2011-09-02scp: Fixed documentation bug #9Aris Adamantiadis1-2/+6
(cherry picked from commit 99e6fde751365f0f3508ce9e1899d28ca4c3edb3)
2011-08-29channels: Fix possible infinite loop in channel_read().rofl0r1-1/+5
(cherry picked from commit 66188f1af84852b9d9fc09acf26454c4cfacefef)
2011-08-29sftp: Handle short reads of sftp_async_read().Jonas Jonsson1-3/+2
sftp_async_read() and sftp_async_read_begin() assume that the whole read will be successful but when this is not the case, the offset will be wrong. Signed-off-by: Andreas Schneider <asn@cryptomilk.org> (cherry picked from commit d1df255df46b0b59ce5abfa1b2a4b971ebb4fb64)
2011-08-27auth: Handle request service timeout in blocking mode.Andreas Schneider1-2/+7
(cherry picked from commit e5e673bafe18032df3b6b7634410a6795e809f2a)