search for: client_x11_get_proto

...ned-off-by: Trixie Able <table at inventati.org> --- clientloop.c | 12 +++++++++--- ssh_config.5 | 1 + 2 files changed, 10 insertions(+), 3 deletions(-) diff --git a/clientloop.c b/clientloop.c index 7bcf22e3..99dcec89 100644 --- a/clientloop.c +++ b/clientloop.c @@ -342,11 +342,17 @@ client_x11_get_proto(struct ssh *ssh, const char *display, rmdir(xauthdir); return -1; } - - if (timeout >= UINT_MAX - X11_TIMEOUT_SLACK) + /* add (at most) X11_TIMEOUT_SLACK to timeout to get + * x11_timeout_real, but do not adjust...

...Platform: ix86 OS/Version: NetBSD Status: NEW Severity: normal Priority: P2 Component: ssh AssignedTo: bitbucket at mindrot.org ReportedBy: mark at mcs.vuw.ac.nz The invocation of "xauth list <display>" in client_x11_get_proto() in clientloop.c has a bogus trailing "." argument which causes xauth to unnecessarily try to lookup a display called "." after reporting about the display that we actually care about. Fix is to change the: snprintf(cmd, sizeof(cmd),...

...at mindrot.org Reporter: jjelen at redhat.com Upstream commit [1] changed logic of handling errors of DISPLAY variable and introduced undefined behaviour. When client requests X11 forwarding and does not have DISPLAY variable set, getenv returns NULL (ssh.c:1707), the program gets into client_x11_get_proto() function, where the variable is passed directly to logit function as it is (clientloop.c:321). This case is handled by current GCC and therefore not causing segfault but writing DISPLAY "(null)" invalid; disabling X11 forwarding It is not correct and should be fixed. Preferably b...

On Thu, Jun 07, 2018 at 06:14:42PM -0700, PGNet Dev wrote: > On 6/7/18 6:08 PM, Darren Tucker wrote: > > Well the intent is you should be able to set CC and LD to whatever you > > want as long as they work. In this case, the OSSH_CHECK_LDFLAG_LINK > > test invokes autoconf's AC_LINK_IFELSE with uses CC not LD. I'm not > > sure what to do about it yet though. I

...H_SSH_KEY_SIGN=\"/usr/local/lib/ssh-keysign\" -D_PATH_SSH_PKCS11_HELPER=\"/usr/local/lib/ssh-pkcs11-helper\" -D_PATH_SSH_PIDDIR=\"/var/run\" -D_PATH_PRIVSEP_CHROOT_DIR=\"/var/empty\" -DHAVE_CONFIG_H -c clientloop.c -o clientloop.o clientloop.c: In function ?client_x11_get_proto?: clientloop.c:378:14: warning: ?%s? directive output may be truncated writing up to 4095 bytes into a region of size 1020 [-Wformat-truncation=] "%s %s%s list %s 2>" _PATH_DEVNULL, ^~ clientloop.c:381:20: generated ? xauthfile : "",...

Numerous how-tos all over the Internet show how one would set up a tunnel using ssh, e.g.: ssh -f -o Tunnel=ethernet <server_ip> true I was wondering if there's a way to subsequently acquire the names of the local and remote tun/tap interfaces (e.g., using the default "-w any:any") for subsequent automatic tunnel configuration, e.g.: ip link set $TapDev up ip link set

...e > debug2: channel 0: open confirm rwindow 0 rmax 32768 > debug3: send packet: type 1 > client_loop: Broken pipe > -------------- next part -------------- diff --git a/clientloop.c b/clientloop.c index 521467bd..677236a9 100644 --- a/clientloop.c +++ b/clientloop.c @@ -364,7 +364,7 @@ client_x11_get_proto(struct ssh *ssh, const char *display, SSH_X11_PROTO, x11_timeout_real, _PATH_DEVNULL); } - debug2("%s: %s", __func__, cmd); + debug2("%s: xauth command: %s", __func__, cmd); if (timeout != 0 && x11_refuse_time == 0) { now = monotime()...

...el_lookup(id)) == NULL) - fatal("%s: no channel for id %d", __func__, id); - - display = getenv("DISPLAY"); - if (cctx->want_x_fwd && options.forward_x11 && display != NULL) { - char *proto, *data; - /* Get reasonable local authentication information. */ - client_x11_get_proto(display, options.xauth_location, - options.forward_x11_trusted, &proto, &data); - /* Request forwarding with authentication spoofing. */ - debug("Requesting X11 forwarding with authentication spoofing."); - x11_request_forwarding_with_spoofing(id, display, proto, data); -...

Hi, OpenSSH 8.0p1 is almost ready for release, so we would appreciate testing on as many platforms and systems as possible. Snapshot releases for portable OpenSSH are available from http://www.mindrot.org/openssh_snap/ The OpenBSD version is available in CVS HEAD: http://www.openbsd.org/anoncvs.html Portable OpenSSH is also available via git using the instructions at