search for: ai_pass

...sh-2.9p1/channels.c openssh-2.9p1-ajf.1/channels.c --- openssh-2.9p1/channels.c Tue Apr 17 14:14:35 2001 +++ openssh-2.9p1-ajf.1/channels.c Wed Jun 6 23:25:36 2001 @@ -1815,13 +1815,25 @@ /* * getaddrinfo returns a loopback address if the hostname is * set to NULL and hints.ai_flags is not AI_PASSIVE + * + * Oh yeah? Setting hostname to NULL and hints.ai_flags to + * AI_PASSIVE on Red Hat Linux release 6.0 (Hedwig) with + * Linux kernel 2.2.14 does no such thing. On that system + * "::" and "0.0.0.0" (and maybe one other value which slips + * my memory) are return...

...drinfo (such as OpenBSD), but the unless the functionality of getaddrinfo is majorly different, I think this problem would be similar everywhere. The code in question in sshconnect.c (lines 201 to 209) to first checks if the options.bindaddr is NULL, if it is not it sets the hints.ai_flag value to AI_PASSIVE. The effect of this seems to me to bind the outgoing connections to "anyaddr" not the address specified by options.bindaddr. If the AI_PASSIVE assignment at line 208 is removed, then the bind address for outgoing connections operates as expected. I'm not sure of the security impli...

https://bugzilla.mindrot.org/show_bug.cgi?id=2636 Bug ID: 2636 Summary: Fix X11 forwarding, when ::1 is not configured Product: Portable OpenSSH Version: 7.3p1 Hardware: Sparc OS: Solaris Status: NEW Severity: minor Priority: P5 Component: sshd Assignee: unassigned-bugs at

http://bugzilla.mindrot.org/show_bug.cgi?id=515 Summary: BindAddress and -b not working Product: Portable OpenSSH Version: 3.4p1 Platform: UltraSparc OS/Version: Solaris Status: NEW Severity: normal Priority: P2 Component: ssh AssignedTo: openssh-unix-dev at mindrot.org ReportedBy: murple

...11 /* system error returned in errno */ +#endif /* ndef EAI_ADDRFAMILY */ +#ifndef EAI_BADHINTS #define EAI_BADHINTS 12 #define EAI_PROTOCOL 13 #define EAI_MAX 14 -#endif /* ndef EAI_ADDRFAMILY */ +#endif /* ndef EAI_BADHINTS */ /* * Flag values for getaddrinfo() @@ -66,8 +68,6 @@ #define AI_PASSIVE 0x00000001 /* get address to use bind() */ #define AI_CANONNAME 0x00000002 /* fill ai_canonname */ #define AI_NUMERICHOST 0x00000004 /* prevent name resolution */ -/* valid flags for addrinfo */ -#define AI_MASK (AI_PASSIVE | AI_CANONNAME | AI_NUMERICHOST) #define AI_ALL 0x00000100 /* IPv...

...bindaddr4.sin_family = AF_INET; err = set_sock_addr(address, - (union sock_addr *)&bindaddr4, NULL); + (union sock_addr *)&bindaddr4, NULL, + AI_PASSIVE); if (err) { syslog(LOG_ERR, "cannot resolve local IPv4 bind address: %s, %s", @@ -650,7 +651,8 @@ int main(int argc, char **argv) if (fd6 >= 0) { bindaddr6.sin6_famil...

...4.sin_family = AF_INET; > err = set_sock_addr(address, > - (union sock_addr *)&bindaddr4, NULL); > + (union sock_addr *)&bindaddr4, NULL, > + AI_PASSIVE); > if (err) { > syslog(LOG_ERR, > "cannot resolve local IPv4 bind address: %s, %s", > @@ -650,7 +651,8 @@ int main(int argc, char **argv) > if (fd6 >= 0) { >...

...al IP address */ if (options.bind_address == NULL) return sock; memset(&hints, 0, sizeof(hints)); hints.ai_family = ai->ai_family; hints.ai_socktype = ai->ai_socktype; hints.ai_protocol = ai->ai_protocol; hints.ai_flags = AI_PASSIVE; gaierr = getaddrinfo(options.bind_address, "0", &hints, &res); [..] - Ben

...cket.tpu on 6-JAN-20 02 08:40:51.01 OPENVMS_AXP */ /* -*- c-file-style: "linux" -*- Copyright (C) 1992-2001 by Andrew Tridgell <tridge@samba.org> @@ -105,7 +106,8 @@ bhints.ai_family = ai_family; bhints.ai_socktype = ai_socktype; bhints.ai_flags = AI_PASSIVE; - if (getaddrinfo(bind_address, NULL, &bhints, &bres_all) == -1) { + error = getaddrinfo(bind_address, NULL, &bhints, &bres_all); + if (error == -1) { rprintf(FERROR, RSYNC_NAME ": getaddrinfo %s: %s\n", bind_...

...ET; > > err = set_sock_addr(address, > > - (union sock_addr *)&bindaddr4, NULL); > > + (union sock_addr *)&bindaddr4, NULL, > > + AI_PASSIVE); > > if (err) { > > syslog(LOG_ERR, > > "cannot resolve local IPv4 bind address: %s, %s", > > @@ -650,7 +651,8 @@ int main(int argc, char **argv) > > if (fd6 &g...

...bind_address, - int af_hint) +static int open_socket_in(struct addrinfo *resp) { int one=1; int s; - struct addrinfo hints, *all_ai, *resp; - char portbuf[10]; - int error; - - memset(&hints, 0, sizeof(hints)); - hints.ai_family = af_hint; - hints.ai_socktype = type; - hints.ai_flags = AI_PASSIVE; - snprintf(portbuf, sizeof(portbuf), "%d", port); - error = getaddrinfo(bind_address, portbuf, &hints, &all_ai); - if (error) { - rprintf(FERROR, RSYNC_NAME ": getaddrinfo: bind address %s: %s\n", - bind_address, gai_strerror(error)); - return -1; - } /* We m...

...ive local IP address */ - if (options.bind_address == NULL) + if (options.num_bind_address == 0){ return sock; + } - memset(&hints, 0, sizeof(hints)); - hints.ai_family = ai->ai_family; - hints.ai_socktype = ai->ai_socktype; - hints.ai_protocol = ai->ai_protocol; - hints.ai_flags = AI_PASSIVE; - gaierr = getaddrinfo(options.bind_address, NULL, &hints, &res); - if (gaierr) { - error("getaddrinfo: %s: %s", options.bind_address, - ssh_gai_strerror(gaierr)); - close(sock); - return -1; + uint addrfound = 0; + uint last_idx = options.num_bind_address - 1; // last...

http://bugzilla.mindrot.org/show_bug.cgi?id=413 ------- Additional Comments From dtucker at zip.com.au 2005-01-24 14:27 ------- Created an attachment (id=782) --> (http://bugzilla.mindrot.org/attachment.cgi?id=782&action=view) forward-bind.sh: regression test for binding port forwards to addresses Current limitations of test: - no testing of IPv6 - no testing of backwards compat

I could not find this question anywhere, but I apologize if it is and I just missed it. Running an Alpha, OSF1 V5.1 1885 configure went fine. compile failed: cc -I. -I. -g -DHAVE_CONFIG_H -I./popt -c lib/getaddrinfo.c -o lib/getaddrinfo.o cc: Error: lib/getaddrinfo.c, line 182: In this statement, "EAI_MAX" is not declared. (undeclared) if (ecode < 0 || ecode > EAI_MAX)

Hi! Here is the patch to support tcp wrappers with x11-forwarded connections. The patch is for openssh-3.0.1p1 but it works fine with 2.9.9p2 too. I've understood that this will not be included in the official version because it adds complexity (?!) to openssh. Binding the forwarded port to localhost doesn't solve all problems. I've understood that you should also implement

...ns(net_port); > - > - if (bind(listenfd, (struct sockaddr *) &server, sizeof(server)) == -1) > - fatal_with_errno("Can't bind TCP port number %d", net_port); > + memset (&hints, 0, sizeof (struct addrinfo)); > + hints.ai_family = opt_af; > + hints.ai_flags = AI_PASSIVE; > + hints.ai_protocol = IPPROTO_TCP; > + hints.ai_socktype = SOCK_STREAM; > + > + service = xmalloc (sizeof (char) * 6); > + > + if (snprintf (service, 6, "%hu", (unsigned short int)net_port) < 1) > + fatal_with_errno("snprintf"); > + > + if (g...

...NUM_SOCKS]; - char display[512]; - char hostname[MAXHOSTNAMELEN]; for (display_number = x11_display_offset; display_number < MAX_DISPLAYS; @@ -2416,12 +2414,12 @@ port = 6000 + display_number; memset(&hints, 0, sizeof(hints)); hints.ai_family = IPv4or6; - hints.ai_flags = AI_PASSIVE; /* XXX loopback only ? */ + hints.ai_flags = gateway_ports ? AI_PASSIVE : 0; hints.ai_socktype = SOCK_STREAM; snprintf(strport, sizeof strport, "%d", port); if ((gaierr = getaddrinfo(NULL, strport, &hints, &aitop)) != 0) { error("getaddrinfo: %.100s",...

Changes since OpenSSH 6.4 ========================= This is a feature-focused release. New features: * ssh(1), sshd(8): Add support for key exchange using elliptic-curve Diffie Hellman in Daniel Bernstein's Curve25519. This key exchange method is the default when both the client and server support it. * ssh(1), sshd(8): Add support for Ed25519 as a public key type. Ed25519 is a

Okay, let me chime in here. AI_ADDRCONFIG seems to be the Wrong Thing[TM]. AI_PASSIVE seems to be the Right Thing[TM]. Part of the problem is that the fallback code for the case of getaddrinfo() not being there is braindead, and of course the original code used to use gethostbyname() directly. I already have a much better fallback version of getaddrinfo() written which would le...

http://bugzilla.mindrot.org/show_bug.cgi?id=413 dtucker at zip.com.au changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #229 is|0 |1 obsolete| | ------- Additional Comments From dtucker at zip.com.au 2003-06-04 21:37 -------