nhyatt/putty-source
1
0
Fork 0
mirror of https://git.tartarus.org/simon/putty.git synced 2025-07-03 04:22:47 -05:00
Code Issues Projects Releases Wiki Activity

Add the CRC32 compensation attack detector that all other SSH

Browse Source 
clients have had for ages and I forgot about. Of course I've got the
version with the buffer overflow fixed!

[originally from svn r1535]
This commit is contained in:
Simon Tatham
2002-01-08 11:57:32 +00:00
parent 349e2ce9e2
commit d237773599
10 changed files with 183 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
ssh.c
View File

@ -724,6 +724,11 @@ static int ssh1_rdpkt(unsigned char **data, int *datalen)
st->to_read -= st->chunk;
}
if (cipher && detect_attack(pktin.data, st->biglen, NULL)) {
bombout(("Network attack (CRC compensation) detected!"));
crReturn(0);
}
if (cipher)
cipher->decrypt(pktin.data, st->biglen);