iked: Wrong data structure zeroized
The parameter int mask was confused with the local variable struct
sockaddr_in mask4. bzero(3) was applied to mask instead of mask4.
ok markus@
Fix multiple RFC 4462 (GSSAPIAuthentication) compliance problems
1) Remove an early failure return for GSSAPI authentication attempts
made for invalid accounts that yielded different behaviour for
valid vs invalid accounts.
2) Fix a situation where some GSSAPI requestes were not correctly
subjected to MaxAuthTries.
3) Fix a moderate pre-authentication resource DoS related to #2.
Add missing logging for error cases.
Report and fixes from Manfred Kaiser, milCERT AT
fix ownership and lifetime of several bits of client state that
need to persist for the life of the connection, especially the
cached hostkey that was being incorrectly freed early on some
paths, possibly allowing its use after free.
Reported by Zhenpeng (Leo) Lin from depthfirst.com
Fix cases in GSSAPI and keyboard-interactive authentication where
the minimum per-attempt delay was not being enforced.
Reported by Orange Cyberdefense Vulnerability Team
retire the cpp.sh script and install the cpp binary directly in /usr/bin
The cpp.sh wrapper script no longer serves any purpose:
* We no longer force the preprocessor into -traditional mode.
* Our compilers already define __GNUC__ for the preprocessor.
* The location of cpp is well known.
* Our compilers only use the standard include paths by default.
gcc4 testing by miod@
Add set-hook -B install a subscription like in control mode.
Subscriptions are formats which are checked once a second and if changed
invoke a hook. show-hooks -B lists.
sys/ihidev: replace HONOR MagicBook Touchpad quirk
Old quirk was unstable, it brings, some boots, touchpad with multitouch,
but still failed on on reading the report.
It was observed that sending anything to the touchpad wakes it up but it
ignores the command that was sent. If it was GET_REPORT, when read reads
series of 0xff.
Here a clean and trivial quirk where I send the second GET_REPORT and
ignore the first one.
OK: mglocker@