From 20a30527ab7de78117375b62dfc202f864744598 Mon Sep 17 00:00:00 2001 From: djm Date: Thu, 9 Mar 2023 06:58:26 +0000 Subject: [PATCH] include destination constraints for smartcard keys too. Spotted by Luci Stanescu; ok deraadt@ markus@ --- usr.bin/ssh/authfd.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/usr.bin/ssh/authfd.c b/usr.bin/ssh/authfd.c index 4b81b385637..e365c904af6 100644 --- a/usr.bin/ssh/authfd.c +++ b/usr.bin/ssh/authfd.c @@ -1,4 +1,4 @@ -/* $OpenBSD: authfd.c,v 1.131 2023/03/05 05:34:09 dtucker Exp $ */ +/* $OpenBSD: authfd.c,v 1.132 2023/03/09 06:58:26 djm Exp $ */ /* * Author: Tatu Ylonen * Copyright (c) 1995 Tatu Ylonen , Espoo, Finland @@ -664,7 +664,7 @@ ssh_update_card(int sock, int add, const char *reader_id, const char *pin, struct dest_constraint **dest_constraints, size_t ndest_constraints) { struct sshbuf *msg; - int r, constrained = (life || confirm); + int r, constrained = (life || confirm || dest_constraints); u_char type; if (add) { -- 2.20.1