openssh bugs - Apr 2008 - [Bug 1090] Increase MAX_SESSIONS?

https://bugzilla.mindrot.org/show_bug.cgi?id=1090


Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added                       
----------------------------------------------------------------------------
         AssignedTo|bitbucket at mindrot.org       |djm at mindrot.org




--- Comment #12 from Damien Miller <djm at mindrot.org>  2008-04-24
14:34:19 ---
Created an attachment (id=1483)
 --> (http://bugzilla.mindrot.org/attachment.cgi?id=1483)
Make sessions array dynamic, audit server for leaks and fatal errors on
fd table full conditions

This patch makes the sessions array dynamic, and fixes several fd leaks
and fatal() errors that occur when out-of-fd conditions are hit in the
server.

It also adds a channel request confirmation handler to the client, so
it can do something intelligent when a request fails (e.g. because the
server is out of fds).

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1090





--- Comment #13 from Damien Miller <djm at mindrot.org>  2008-05-08
22:37:54 ---
a modified version of this patch has been committed, and will be in
OpenSSH-5.1
> CVSROOT:        /cvs
> Module name:    src
> Changes by:     djm at cvs.openbsd.org     2008/05/08 06:21:16
> 
> Modified files:
>         usr.bin/ssh    : Makefile.inc monitor.c monitor_wrap.c
>                          servconf.c servconf.h session.c session.h
>                          sshd_config sshd_config.5
> 
> Log message:
> Make the maximum number of sessions run-time controllable via
> a sshd_config MaxSessions knob. This is useful for disabling
> login/shell/subsystem access while leaving port-forwarding working
> (MaxSessions 0), disabling connection multiplexing (MaxSessions 1) or
> simply increasing the number of allows multiplexed sessions.
> 
> Because some bozos are sure to configure MaxSessions in excess of the
> number of available file descriptors in sshd (which, at peak, might be
> as many as 9*MaxSessions), audit sshd to ensure that it doesn't leak
fds
> on error paths, and make it fail gracefully on out-of-fd conditions -
> sending channel errors instead of than exiting with fatal().
> 
> bz#1090; MaxSessions config bits and manpage from junyer AT gmail.com
> 
> ok markus@
-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1090


Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |RESOLVED
         Resolution|                            |FIXED




-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.