nhyatt/putty-source
1
0
Fork 0
mirror of https://git.tartarus.org/simon/putty.git synced 2025-01-10 09:58:01 +00:00
Code Issues Projects Releases Wiki Activity

Old Dropbear servers have the ssh-close-vs-request bug.

Browse Source 
Add automatic bug detection. (Versions verified by Matt Johnston.)

(cherry picked from commit 63dddfc00f)
This commit is contained in:
Jacob Nevins 2015-04-23 23:42:45 +01:00 committed by Simon Tatham
parent 2856422eab
commit 5ac299449e
1 changed files with 7 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
ssh.c
View File

@ -2817,11 +2817,15 @@ static void ssh_detect_bugs(Ssh ssh, char *vstring)
if (conf_get_int(ssh->conf, CONF_sshbug_chanreq) == FORCE_ON || if (conf_get_int(ssh->conf, CONF_sshbug_chanreq) == FORCE_ON ||
(conf_get_int(ssh->conf, CONF_sshbug_chanreq) == AUTO && (conf_get_int(ssh->conf, CONF_sshbug_chanreq) == AUTO &&
(wc_match("OpenSSH_[2-5].*", imp) || (wc_match("OpenSSH_[2-5].*", imp) ||
wc_match("OpenSSH_6.[0-6]*", imp)))) { wc_match("OpenSSH_6.[0-6]*", imp) ||
wc_match("dropbear_0.[2-4][0-9]*", imp) ||
wc_match("dropbear_0.5[01]*", imp)))) {
/* /*
* These versions have the SSH-2 channel request bug. 6.7 and * These versions have the SSH-2 channel request bug.
* above do not: * OpenSSH 6.7 and above do not:
* https://bugzilla.mindrot.org/show_bug.cgi?id=1818 * https://bugzilla.mindrot.org/show_bug.cgi?id=1818
* dropbear_0.52 and above do not:
* https://secure.ucc.asn.au/hg/dropbear/rev/cd02449b709c
*/ */
ssh->remote_bugs |= BUG_SENDS_LATE_REQUEST_REPLY; ssh->remote_bugs |= BUG_SENDS_LATE_REQUEST_REPLY;
logevent("We believe remote version has SSH-2 channel request bug"); logevent("We believe remote version has SSH-2 channel request bug");