search for: weimer

...undeclared identifier is reported only once > channels.c:2396: for each function it appears in.) > channels.c:2468: warning: implicit declaration of function `gethostname' > > channels.c:2396: warning: unused variable `hostname' > make: *** [channels.o] Error 1 -- Florian Weimer Florian.Weimer at RUS.Uni-Stuttgart.DE University of Stuttgart http://cert.uni-stuttgart.de/ RUS-CERT +49-711-685-5973/fax +49-711-685-5898

...of a hack), because it's easy to provide the authctxt information in all places where auth_get_user() is currently called. In addition, server_loop() would be changed to accept a struct passwd * and build a fake authctxt for it, to be compatible with the v2 code path. Thoughts? -- Florian Weimer Florian.Weimer at RUS.Uni-Stuttgart.DE University of Stuttgart http://cert.uni-stuttgart.de/ RUS-CERT +49-711-685-5973/fax +49-711-685-5898

...:15:44 2001 +++ /usr/local/aegis/public/openssh/branch.2/baseline/openssh/readpass.c Tue Aug 28 11:03:52 2001 @@ -43,7 +43,7 @@ #include "ssh.h" char * -ssh_askpass(char *askpass, char *msg) +ssh_askpass(const char *askpass, const char *msg) { pid_t pid; size_t len; -- Florian Weimer Florian.Weimer at RUS.Uni-Stuttgart.DE University of Stuttgart http://cert.uni-stuttgart.de/ RUS-CERT +49-711-685-5973/fax +49-711-685-5898

The README file seems to refer to an old location of zlib. The current one seems to be: http://www.gzip.org/zlib/ -- Florian Weimer Florian.Weimer at RUS.Uni-Stuttgart.DE University of Stuttgart http://cert.uni-stuttgart.de/ RUS-CERT +49-711-685-5973/fax +49-711-685-5898

If the source and destination file are identical, the receiving scp truncates the file. On the sending end, read() returns 0, and garbage is sent instead of actual data, and the receiving end puts it into the file, which at least confuses the users. -- Florian Weimer Florian.Weimer at RUS.Uni-Stuttgart.DE University of Stuttgart http://cert.uni-stuttgart.de/ RUS-CERT +49-711-685-5973/fax +49-711-685-5898

On Fri, Feb 21, 2020 at 04:00:30PM +0100, Florian Weimer wrote: > * Richard W. M. Jones: > > > On Fri, Feb 21, 2020 at 01:19:34PM +0100, Florian Weimer wrote: > >> I think what confuses me is that keep talking about a single binary, but > >> clearly there is this separate vddk DSO, and there is talk of plugins. > >&gt...

...ypto.stanford.edu/~dabo/abstracts/ssl-timing.html>), I wonder if it might be a good idea to add calls to RSA_blinding_on() before the OpenSSL RSA decryption routines are invoked. The issue is not a LAN-only issue, BTW. Packet delay variation is usually higher in LANs than in WANs. -- Florian Weimer Weimer at CERT.Uni-Stuttgart.DE University of Stuttgart http://CERT.Uni-Stuttgart.DE/people/fw/ RUS-CERT fax +49-711-685-5898

On Sun, Jun 14, 2009 at 10:50 AM, Florian Weimer<fw at deneb.enyo.de> wrote: > Is this really a problem for MLton?  I think you only get less precise > alias analysis, and that's it. Correct. However, I want a fair comparison between LLVM performance and the native x86 codegen. If I don't give LLVM the same information the x8...

On Fri, Feb 21, 2020 at 01:19:34PM +0100, Florian Weimer wrote: > I think what confuses me is that keep talking about a single binary, but > clearly there is this separate vddk DSO, and there is talk of plugins. > So it seems to me that multiple files are involved already? nbdkit is a standalone binary that happens to be able to load plugins fr...

We recently discovered that our OpenSSH distribution binaries contain retpoline thunks. It's due to this OSSH_CHECK_CFLAG_COMPILE([-mfunction-return=thunk]) # gcc OSSH_CHECK_CFLAG_COMPILE([-mindirect-branch=thunk]) # gcc This was quite surprising because at least the GNU/Linux userspace has no provisions for retpolines. You also fail to enable -fno-plt, so you need

On 02/05/2018 01:33 PM, Florian Weimer wrote: > Do you have strace output going further back, at least to the proceeding > getcwd call?? It would be interesting to see which path the kernel > reports, and if it starts with "(unreachable)". I got the strace output now, but it very difficult to read (chdir in a mul...

...ced before, we have developed a far more powerful mechanism for controlling port forwarding, see: http://cert.uni-stuttgart.de/projects/openssh.php (I'm currenty porting it to the most recent portable OpenSSH version.) Why haven't you used this already existing code? -- Florian Weimer Florian.Weimer at RUS.Uni-Stuttgart.DE University of Stuttgart http://cert.uni-stuttgart.de/ RUS-CERT +49-711-685-5973/fax +49-711-685-5898

...version. This solution avoids passing redundant information, covers the situation where additional checking is of value and is platform independent (except for the implementation of memcpy_secure). The attached patch demonstrates the idea. Thanks, Javier -----Original Message----- From: Florian Weimer [mailto:fweimer at redhat.com] Sent: Thursday, September 27, 2012 5:26 AM To: Martinez, Javier E Cc: Richard Smith; Chris Lattner; llvmdev at cs.uiuc.edu Subject: Re: [LLVMdev] Handling of unsafe functions On 09/21/2012 05:52 AM, Martinez, Javier E wrote: > The proposal comments have largely...

...overs the case pretty well where you try to copy a dynamically sized buffer to the start of a statically sized one. I don't want to say that it doesn't happen, but it seems to be rather rare, and I expect most calls to memcpy_s would use the same expression for both sizes. -- Florian Weimer / Red Hat Product Security Team

...volume mounts maintained by geo-replication can be accessed by others. It's also visible in df output. There might be cases where the mount points not get cleaned up when worker goes faulty and come back. These needs manual cleaning. Thanks, Kotresh HR On Tue, Feb 6, 2018 at 12:37 AM, Florian Weimer <fweimer at redhat.com> wrote: > On 02/05/2018 01:33 PM, Florian Weimer wrote: > > Do you have strace output going further back, at least to the proceeding >> getcwd call? It would be interesting to see which path the kernel reports, >> and if it starts with "(unre...

...keys : - nightlycomp@rio (sure) - comp@rio (maybe) Are you up to date ? Can Fabrice sent you new ssh public ? Tahnks Best Regards -- Gabriel CORRE gac@4js.com - Four J's Development Tools - www.4js.com -------------- next part -------------- An embedded message was scrubbed... From: Florian Weimer <fw@deneb.enyo.de> Subject: [SECURITY] [DSA 1576-1] New openssh packages fix predictable randomness Date: Wed, 14 May 2008 11:24:56 +0200 Size: 18220 Url: http://lists.samba.org/archive/rsync/attachments/20080515/5f6721eb/SECURITYDSA1576-1Newopensshpackagesfixpredictablerandomness.eml

On Fri, Feb 21, 2020 at 05:02:12PM +0100, Florian Weimer wrote: > * Richard W. M. Jones: > > > On Fri, Feb 21, 2020 at 04:00:30PM +0100, Florian Weimer wrote: > >> * Richard W. M. Jones: > >> > >> > On Fri, Feb 21, 2020 at 01:19:34PM +0100, Florian Weimer wrote: > >> >> I think what confuses me i...

On Sunday 14 June 2009 14:09:33 Wesley W. Terpstra wrote: > On Sun, Jun 14, 2009 at 10:50 AM, Florian Weimer<fw at deneb.enyo.de> wrote: > > Is this really a problem for MLton?  I think you only get less precise > > alias analysis, and that's it. > > Correct. However, I want a fair comparison between LLVM performance > and the native x86 codegen. If I don't give LLVM the...

Florian Weimer wrote: > * Wesley W. Terpstra: > >> The documentation of unwind/invoke is quite clear and does exactly >> what I need: unwinding the stack. I don't need it to carry an object >> back. I don't need it to figure out what the type of the object is or >> what catc...

https://bugzilla.mindrot.org/show_bug.cgi?id=1867 Florian Weimer <fweimer at redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |fweimer at redhat.com --- Comment #3 from Florian Weimer <fweimer at redha...