artulab
projects / openbsd / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 632d59b) | patch
require control-escape character sequences passed via the '-e ^x'
authordjm <djm@openbsd.org>
Fri, 18 Oct 2024 05:03:34 +0000 (05:03 +0000)
committerdjm <djm@openbsd.org>
Fri, 18 Oct 2024 05:03:34 +0000 (05:03 +0000)
commitd47e98a976588179c954fc7a8d0b1894d6df9832
treefda10f88c6bbea60046c82313efb66a690ed7523tree | snapshot
parent632d59bf82ef1c5ae20fd4a1838ec4a541a50a00commit | diff
require control-escape character sequences passed via the '-e ^x'
commandline to be exactly two characters long. Avoids one by OOB
read if ssh is invoked as "ssh -e^ ..."

Spotted by Maciej Domanski in GHPR368
usr.bin/ssh/ssh.c diff | blob | history
OpenBSD src
by Ahmet Artu Yildirim