search for: writeset

...oid) case SSH_CHANNEL_OPENING: case SSH_CHANNEL_CONNECTING: case SSH_CHANNEL_DYNAMIC: + case SSH_CHANNEL_RDYNAMIC: case SSH_CHANNEL_OPEN: case SSH_CHANNEL_X11_OPEN: case SSH_CHANNEL_INPUT_DRAINING: @@ -1033,14 +1038,23 @@ channel_decode_socks4(Channel *c, fd_set *readset, fd_set *writeset) u_int16_t dest_port; struct in_addr dest_addr; } s4_req, s4_rsp; + Buffer *input, *output; + + if (c->type == SSH_CHANNEL_RDYNAMIC) { + input = &c->output; + output = &c->input; + } else { + input = &c->input; + output = &c->output; + } debug2("c...

Using OpenSSH_8.3p1 I had an open (working) connection to some other box; after a bit of inactivity, some device in the middle seems to have forgotten about the TCP connection (NAT) and broke it. I've got an EscapeChar defined, though; so first I tried to send a BREAK and, when that didn't help (TCP already gone, packets get lost!), I tried (just out of curiosity) a Rekey. Now I can see

...+714,7 @@ readSetting (CCSContext *c, case TypeAction: { - QStringList list = cfg->readListEntry (key, ';'); + QStringList list = cfg->readListEntry (key); CCSSettingActionValue *array = new CCSSettingActionValue[list.count() ]; @@ -1095,7 +1095,7 @@ writeSetting (CCSContext *c, l = l->next; } - cfg->writeEntry (key, list, ';'); + cfg->writeEntry (key, list); } break; @@ -1113,7 +1113,7 @@ writeSetting (CCSContext *c, l = l->next; } - cfg->writeEntry (key, list, ';'); +...

...-- diff -ur openssh-1.2.2/clientloop.c openssh-1.2.2-trans_inter/clientloop.c --- openssh-1.2.2/clientloop.c Mon Dec 6 20:38:32 1999 +++ openssh-1.2.2-trans_inter/clientloop.c Fri Mar 3 11:21:12 2000 @@ -396,8 +396,10 @@ */ void -client_wait_until_can_do_something(fd_set * readset, fd_set * writeset) +client_wait_until_can_do_something(fd_set * readset, fd_set * writeset, int trans_inter) { + int select_return; + /* Initialize select masks. */ FD_ZERO(readset); @@ -436,15 +438,32 @@ max_fd = channel_max_fd(); /* - * Wait for something to happen. This will suspend the process un...

.../ static void port_open_helper(Channel *c, char *rtype); +#endif /* -- channel core */ @@ -678,6 +683,7 @@ chan_fn *channel_pre[SSH_CHANNEL_MAX_TYPE]; chan_fn *channel_post[SSH_CHANNEL_MAX_TYPE]; +#ifdef WITH_TCPFWD static void channel_pre_listener(Channel *c, fd_set * readset, fd_set * writeset) { @@ -690,7 +696,9 @@ debug3("channel %d: waiting for connection", c->self); FD_SET(c->sock, writeset); } +#endif +#ifdef WITH_PROTO13 static void channel_pre_open_13(Channel *c, fd_set * readset, fd_set * writeset) { @@ -699,6 +707,7 @@ if (buffer_len(&c->outpu...

...fine SSH_SOCKS5_AUTHDONE 0x1000 +#define SSH_SOCKS5_NOAUTH 0x00 +#define SSH_SOCKS5_IPV4 0x01 +#define SSH_SOCKS5_DOMAIN 0x03 +#define SSH_SOCKS5_IPV6 0x04 +#define SSH_SOCKS5_CONNECT 0x01 +#define SSH_SOCKS5_SUCCESS 0x00 + +static int +channel_decode_socks5(Channel *c, fd_set * readset, fd_set * writeset) +{ + struct { + u_int8_t version; + u_int8_t command; + u_int8_t reserved; + u_int8_t atyp; + } s5_req, s5_rsp; + u_int16_t dest_port; + u_char *p, dest_addr[255+1]; + int i, have, found, nmethods, addrlen, af; + + debug2("channel %d: decode socks5", c->self); + p = buffer_ptr(&am...

...t) max_time_milliseconds / + 1000, (int) 1000 * (max_time_milliseconds % 1000)); } if (tvp!=NULL) debug3("tvp!=NULL kid %d mili %d", child_terminated, max_time_milliseconds); /* Wait for something to happen, or the timeout to expire. */ ret = select((*maxfdp)+1, *readsetp, *writesetp, NULL, tvp); + debug("select() returned %d, child_terminated=%d, channel_still_open() returned %d", ret, + child_terminated, channel_still_open()); if (ret == -1) { if (errno != EINTR) @@ -590,6 +597,8 @@ /* Sleep in select() until we can do something. */ wait_until_can_do_...

Hi OpenSSH developers, I am using openSSH (now 2.9.9p2, but prob occurs in 2.9p2 also) to execute commands on a remote machine which outputs data to stdout then pipes it to another invocation of ssh which connects back to the first machine in the same way, where it starts a program to read and store the output from the command on the second machine. I am using the "command" option in

The command "ssh ls -l /doesnotexist" gives various responses: Running from a 200 MHz PentiumPro with dsa key added to ssh-agent: Mistakes worst to fast machine: To a faster 600 MHz dual processor i686 600 MHz machine: ls: /doesnotexist: No such file or directory -- correct nothing at all -- wrong ls: select: Bad file descriptor -- wrong

...=============================================================== RCS file: RCS/serverloop.c,v retrieving revision 1.1 diff -c -r1.1 serverloop.c *** serverloop.c 2001/07/26 16:50:27 1.1 --- serverloop.c 2001/07/26 18:09:04 *************** *** 697,702 **** --- 697,703 ---- fd_set *readset = NULL, *writeset = NULL; int rekeying = 0, max_fd, status; pid_t pid; + int fd; debug("Entering interactive session for SSH2."); *************** *** 736,742 **** xfree(writeset); signal(SIGCHLD, SIG_DFL); ! while ((pid = waitpid(-1, &status, WNOHANG)) > 0) session_clo...

...on * one of the file descriptors). */ - -static void +/* + * SD Mod: We changed the return value of client_wait_until_can_do_something + * from void to int. It now returns 1 if the steno_timer has expired and 0 if not. + */ +int client_wait_until_can_do_something(fd_set **readsetp, fd_set **writesetp, int *maxfdp, int *nallocp, int rekeying) { + /* SD Mod: added variable steno_timer */ + static struct timeval steno_timer = {0, 50000}; + + int return_val = 0; + long int prev_timer_val = 0; + /* Add any selections by the channel mechanism. */ chann...

...=0xb8235290 , berr=0xb82352a0, buf=0xbf9efda8 "C", len=1) at ../clientloop.c:882 #8 0xb7fba94d in client_simple_escape_filter (c=0x651c, buf=0xbf9efda8 "C", len =1) at ../clientloop.c:1281 #9 0xb7fcc965 in channel_handle_rfd (c=0xb8235240, readset=<value optimized out >, writeset=0xb8234df0) at ../channels.c:1522 #10 0xb7fcce65 in channel_post_open (c=0xb8235240, readset=0xb8233828, writeset= 0xb8234df0) at ../channels.c:1729 #11 0xb7fd0e1b in channel_handler (ftab=0xb7ffd680, readset=0xb8233828, writeset =0xb8234df0) at ../channels.c:1872 #12 0xb7fbb3d8 in client_loop (hav...

Hello, In response to the timing analysis attacks presented by Dawn Song et. al. in her paper http://paris.cs.berkeley.edu/~dawnsong/ssh-timing.html we at Silicon Defense developed a patch for openssh to avoid such measures. Timing Analysis Evasion changes were developed by C. Jason Coit and Roel Jonkman of Silicon Defense. These changes cause SSH to send packets unless request not to,

...e) { + case SSH_MSG_CHANNEL_DATA: + case SSH_CMSG_STDIN_DATA: + case SSH_SMSG_STDOUT_DATA: + case SSH_SMSG_STDERR_DATA: + case SSH2_MSG_CHANNEL_DATA: + case SSH2_MSG_CHANNEL_EXTENDED_DATA: + time(&idletime_last); + } +} + +int +packet_select(int maxfds, + fd_set *readset, fd_set *writeset, fd_set *exceptset, + int max_time_milliseconds) +{ + struct timeval tv, *tvp=NULL; + int ret; + + if (idletimeout>0) { + /* Count the time to idletimeout */ + time_t diff=time(NULL)-idletime_last; + if (diff>=idletimeout) + tv.tv_sec=1; + else +...

...ortable. diff -u openssh-3.8.1p1/channels.c openssh-3.8.1p1-bugfix/channels.c --- openssh-3.8.1p1/channels.c 2004-01-20 19:02:09.000000000 -0500 +++ openssh-3.8.1p1-bugfix/channels.c 2004-07-13 09:37:20.000000000 -0400 @@ -702,6 +702,8 @@ channel_pre_open(Channel *c, fd_set * readset, fd_set * writeset) { u_int limit = compat20 ? c->remote_window : packet_get_maxsize(); + if (limit > 0x10000) + limit = 0x10000; if (c->istate == CHAN_INPUT_OPEN && limit > 0 && Common subdirectories: openssh-3.8.1p1/contrib and openssh-3...

Hi, I'm a newbie to openssh and was trying to read the source code recently. Could anyone tell me why in sshd the connection_in and connection_out are the same(seems to be integer 3 in my machine). connection_in is used in process_input(readset), and connection_out is used in process_output(writeset); But how does it work if it tries to read and write from the same file descriptor? /Bob

I'm reading this fine article on O'Reilly: http://linux.oreillynet.com/lpt/a//linux/2001/11/08/ssh_keystroke.html <quote> The paper concludes that the keystroke timing data observable from today's SSH implementations reveals a dangerously significant amount of information about user terminal sessions--enough to locate typed passwords in the session data stream and reduce the

...on the sshd server machine showed waiting data in the Recv-Q, but no waiting data in the Send-Q, so I decided to look into sshd. I grabbed a core from sshd when this hang happened, and gdb showed this stack trace: #0 0x281e20c4 in write () from /usr/lib/libc.so.4 #1 0x804fb18 in process_output (writeset=0xbfbfed04) at /usr/src/secure/usr.sbin/sshd/../../../crypto/openssh/serverloop.c:366 #2 0x8050029 in server_loop (pid=43486, fdin_arg=9, fdout_arg=9, fderr_arg=11) at /usr/src/secure/usr.sbin/sshd/../../../crypto/openssh/serverloop.c:563 #3 0x8053b60 in do_exec_no_pty ( command=0x807...

...149 in abort () from /lib/tls/libc.so.6 #3 0x0806b6f4 in buffer_append_space (buffer=0x93825c0, len=16384) at buffer.c:115 #4 0x0806b5a9 in buffer_append (buffer=0x93825c0, data=0xbfeccdf0, len=16384) at buffer.c:65 #5 0x0806f1c0 in channel_handle_rfd (c=0x9382580, readset=0x92e1e88, writeset=0x92e07b8) at channels.c:1449 #6 0x0806f9bf in channel_post_open (c=0x9382580, readset=0x92e1e88, writeset=0x92e07b8) at channels.c:1636 #7 0x0806fe30 in channel_handler (ftab=0x809a480, readset=0x92e1e88, writeset=0x92e07b8) at channels.c:1778 #8 0x0806ff41 in channel_after_select (read...

...rizable(Instruction *I, bool&IsSimpleLoadStore); > + > + bool areInstsCompatible(Instruction *I, Instruction *J, > + bool IsSimpleLoadStore); > + > + void trackUsesOfI(DenseSet<Value *> &Users, > + AliasSetTracker&WriteSet, Instruction *I, > + Instruction *J, bool&UsesI, bool UpdateUsers = true, > + std::multimap<Value *, Value *> *LoadMoveSet = 0); > + > + void computePairsConnectedTo( > + std::multimap<Value *, Value *&gt...