search for: ssh_packet_send2_wrapped

https://bugzilla.mindrot.org/show_bug.cgi?id=2566 Bug ID: 2566 Summary: 2 integer overflows in function ssh_packet_send2_wrapped() Product: Portable OpenSSH Version: 7.2p1 Hardware: 68k OS: Mac OS X Status: NEW Severity: minor Priority: P5 Component: ssh Assignee: unassigned-bugs at mindrot.org Reporter: Torben.Hansen...

...hmac-sha1 compression: none [preauth] Jul 23 17:42:50.150435 ifav87-apic2 sshd[1090464]: debug1: expecting SSH2_MSG_KEX_ECDH_INIT [preauth] Jul 23 17:42:50.336221 ifav87-apic2 sshd[1090464]: debug1: SSH2_MSG_KEX_ECDH_INIT received [preauth] Jul 23 17:42:50.387724 ifav87-apic2 sshd[1090464]: debug1: ssh_packet_send2_wrapped: resetting send seqnr 3 [preauth] //OpenSSH 8.6p1 Jul 23 17:32:24.910905 apic2 sshd[338663]: debug1: Forked child 342983. Jul 23 17:32:24.911310 apic2 sshd[342983]: debug1: Set /proc/self/oom_score_adj to 0 Jul 23 17:32:24.911493 apic2 sshd[342983]: debug1: rexec start in 4 out 4 newsock 4 pipe 6...

...) { + if ((r = start_compression_zstd_out(ssh)) != 0) + return r; + } else { + if ((r = start_compression_zstd_in(ssh)) != 0) + return r; + } + comp->enabled = COMP_ZSTD; + } else { + return SSH_ERR_INTERNAL_ERROR; + } } } return 0; @@ -1104,9 +1300,15 @@ ssh_packet_send2_wrapped(struct ssh *ssh) if ((r = sshbuf_consume(state->outgoing_packet, 5)) != 0) goto out; sshbuf_reset(state->compression_buffer); - if ((r = compress_buffer(ssh, state->outgoing_packet, - state->compression_buffer)) != 0) - goto out; + if (comp->enabled == COMP_ZSTD) {...

https://bugzilla.mindrot.org/show_bug.cgi?id=2543 Bug ID: 2543 Summary: Tracking bug for OpenSSH 7.3 release Product: Portable OpenSSH Version: -current Hardware: Other OS: All Status: NEW Keywords: meta Severity: normal Priority: P1 Component: Miscellaneous

I added ZSTD support to OpenSSH roughly three years ago and I've been playing with it ever since. The nice part is that ZSTD achieves reasonable compression (like zlib) but consumes little CPU so it is unlikely that compression becomes the bottle neck of a transfer. The compression overhead (CPU) is negligible even when uncompressed data is tunneled over the SSH connection (SOCKS proxy, port

...bug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts: No such file or directory debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts2: No such file or directory debug1: Host 'localhost' is known and matches the ED25519 host key. debug1: Found key in /home/bsradmin/.ssh/known_hosts:4 debug1: ssh_packet_send2_wrapped: resetting send seqnr 3 debug2: ssh_set_newkeys: mode 1 debug1: rekey out after 4294967296 blocks debug1: SSH2_MSG_NEWKEYS sent debug1: Sending SSH2_MSG_EXT_INFO debug1: expecting SSH2_MSG_NEWKEYS debug1: ssh_packet_read_poll2: resetting read seqnr 3 debug1: SSH2_MSG_NEWKEYS received debug2: ssh_se...

I hacked zstd support into OpenSSH a while ago and just started to clean it up in the recent days. The cleanup includes configuration support among other things that I did not have. During testing I noticed the following differences compared to zlib: - highly interactive shell output (as in refreshed at a _very_ high rate) may result in higher bandwidth compared to zlib. Since zstd is quicker

I added ZSTD support to OpenSSH roughly over a year and I've been playing with it ever since. The nice part is that ZSTD achieves reasonable compression (like zlib) but consumes little CPU so it is unlikely that compression becomes the bottle neck of a transfer. The compression overhead (CPU) is negligible even when uncompressed data is tunneled over the SSH connection (SOCKS proxy, port