openssh bugs - Mar 2006 - [Bug 1179] sshd incorrectly rejects remote connections due to IP options

http://bugzilla.mindrot.org/show_bug.cgi?id=1179

           Summary: sshd incorrectly rejects remote connections due to IP
                    options
           Product: Portable OpenSSH
           Version: 4.3p2
          Platform: UltraSparc
        OS/Version: Solaris
            Status: NEW
          Severity: major
          Priority: P2
         Component: sshd
        AssignedTo: bitbucket at mindrot.org
        ReportedBy: markw at wtech-llc.com


On a recently patched ultraSparc/Solaris 10 box, sshd will reject any remote
connections with the following:

Mar 31 16:24:25 sulfur sshd[15986]: [ID 800047 auth.crit] fatal: Connection
from 192.168.1.15 with IP options: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=1179





------- Comment #1 from markw at wtech-llc.com  2006-04-01 09:44 -------
Created an attachment (id=1105)
 --> (http://bugzilla.mindrot.org/attachment.cgi?id=1105&action=view)
Patch I used to fix the problem (probably not optimal, though!)




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=1179





------- Comment #2 from djm at mindrot.org  2006-04-01 17:05 -------
Created an attachment (id=1107)
 --> (http://bugzilla.mindrot.org/attachment.cgi?id=1107&action=view)
reorder ip options check

Could you please try this patch?




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=1179





------- Comment #3 from markw at wtech-llc.com  2006-04-02 03:23 -------
Your patch worked perfectly. Thanks for the fast attention!




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=1179


dtucker at zip.com.au changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Attachment #1107|                            |ok+
               Flag|                            |






------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=1179


djm at mindrot.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
OtherBugsDependingO|                            |1155
              nThis|                            |
             Status|NEW                         |RESOLVED
         Resolution|                            |FIXED




------- Comment #4 from djm at mindrot.org  2006-04-18 15:13 -------
Ok, the fix has been committed and will be in the 4.4 release.




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.