vincentto13
a0aa274981
Fix for issue successfull login of disabled user ( #78 )
...
This commit introduces fix for scenario:
1. Root login disabled on dropbear
2. PAM authentication model enabled
While login as root user, after prompt for password
user is being notified about login failrue, but
after second attempt of prompt for password within
same session, login becames succesfull.
Signed-off-by: Pawel Rapkiewicz <pawel.rapkiewicz@gmail.com>
2019-03-20 22:03:40 +08:00
Michael Jones
b016ebedfd
Add missing word to readme ( #77 )
2019-03-20 21:56:19 +08:00
François Perrad
cb945f9f67
add missing initializer ( #71 )
2019-01-07 23:09:45 +08:00
Matt Johnston
df0f1297eb
merge
2018-11-14 22:58:35 +08:00
Matt Johnston
fe992bf4ea
Split ChanType closehandler() and cleanup() so that dbclient doesn't
...
lose exit status messages
2018-11-14 22:57:56 +08:00
Matt Johnston
ffde4a524f
Remove some cluttering TRACE printouts
2018-11-14 22:52:04 +08:00
Matt Johnston
7e03e4d443
Remove incorrect _POSIX_C_SOURCE
2018-11-06 07:25:53 +08:00
Matt Johnston
02ffdd09dc
- Add adaptive authentication failure delay
...
- Rework monotonic_now/gettime_wrapper and use clock_gettime on more platforms
2018-11-05 23:36:34 +08:00
Matt Johnston
6f6ef4834c
merge remote forward fix
2018-09-07 23:02:53 +08:00
Matt Johnston
d2e71ade72
FIx remote forward listeners
2018-09-07 23:02:20 +08:00
Matt Johnston
892c5fc1c8
Merge writev #include fix
2018-08-26 22:26:42 +08:00
Matt Johnston
e7504b3311
make writev #include consistent for variable declarations too
2018-08-23 23:59:24 +08:00
Matt Johnston
ad3eacf3d6
Merge bugfix delay invalid users
2018-08-23 23:43:45 +08:00
Matt Johnston
52adbb34c3
Wait to fail invalid usernames
2018-08-23 23:43:12 +08:00
Matt Johnston
90f04384ee
fix error message to say localoptions.h
2018-08-23 22:10:07 +08:00
Matt Johnston
195934be96
avoid extended regex features to avoid caring about sed -r vs -E
2018-07-24 20:19:05 +08:00
Matt Johnston
d740dc5489
Fix leaks in kex fuzzers
2018-03-09 23:16:37 +08:00
Matt Johnston
76933e6c0a
move dictionaries to corpus repo
2018-03-09 20:43:11 +08:00
Matt Johnston
38c9408cf8
avoid leak of ecdh public key
2018-03-08 23:51:33 +08:00
Matt Johnston
397af3e6a6
kexhashbuf was much to small in kex fuzzers
2018-03-08 23:23:19 +08:00
Matt Johnston
933bc5f8a7
Disable wrapfds outside of fuzzed code
2018-03-08 23:22:53 +08:00
Matt Johnston
ba94bcd2e8
It turns out you can't have a single-quote in an #error
2018-03-08 22:37:54 +08:00
Matt Johnston
56855744b8
Only advertise a single server ecdsa key when -R (generate as required) is
...
specified. Fixes -R now that default ecdsa key size has changed.
2018-03-08 22:25:33 +08:00
Matt Johnston
b4b11c8155
#error if no ecc size is chosen
2018-03-08 22:22:11 +08:00
Matt Johnston
f82933108d
reduce fuzzer-kexdh params count again, still hitting timeout
2018-03-07 22:50:32 +08:00
Matt Johnston
27828c742c
don't allow null characters in authorized_keys
2018-03-07 22:16:21 +08:00
Matt Johnston
ed4c38ba46
fix leak in option handling
2018-03-07 22:14:36 +08:00
Matt Johnston
e9edbe8bb2
avoid leak of pubkey_options
2018-03-06 22:18:20 +08:00
Matt Johnston
4fd3160179
fix uninitialised memory in fuzzer codepath
2018-03-06 22:02:19 +08:00
Matt Johnston
a60725740b
workaround memory sanitizer FD_ZERO false positives
2018-03-06 21:51:51 +08:00
Matt Johnston
5d065258da
reduce number of dh parameters so fuzzer doesn't timeout
2018-03-06 21:00:09 +08:00
Matt Johnston
149b21d7cf
ciphers/hashes/kex algorithms won't have string lengths, also use
...
dictionary for fuzzer-preauth_nomaths
2018-03-05 21:02:26 +08:00
Matt Johnston
145fb96989
Don't read uninitialised value.
...
From 1d03522625
2018-03-05 16:50:24 +08:00
Matt Johnston
084ff9b4c8
reduce number of params so it doesn't hit a timeout
2018-03-05 16:29:57 +08:00
Matt Johnston
6b05aa4275
fix some links
2018-03-05 14:14:26 +08:00
Matt Johnston
366fc8f335
notes on the fuzzer
2018-03-05 14:07:11 +08:00
Matt Johnston
35f479bd87
Add kexdh and kexecdh fuzzers
2018-03-05 11:50:31 +08:00
Matt Johnston
9d11cad5dc
dictionary for fuzzer-preauth
2018-03-05 00:59:17 +08:00
Matt Johnston
0233dcebb4
try and improve the odds of useful fuzzer activity
2018-03-04 22:11:23 +08:00
Matt Johnston
f7dedab4a7
- fuzzer-pubkey needs to free algoname, fix build
...
- improve dictionary with lengths
2018-03-04 21:44:09 +08:00
Matt Johnston
129c440362
add a dictionary for fuzzer-pubkey
2018-03-04 19:38:34 +08:00
Matt Johnston
abee8093b3
use random keyblob from the fuzzer instead
2018-03-04 19:19:45 +08:00
Matt Johnston
2583b180c9
travis fuzz build clang++
2018-03-04 17:17:37 +08:00
Matt Johnston
1e1e477d85
set up CXX for fuzzing build
2018-03-04 17:08:21 +08:00
Matt Johnston
85eda7d943
try fix travis sanitizer
2018-03-04 15:18:20 +08:00
Matt Johnston
4b36e24735
print config.log on failure
2018-03-04 15:09:41 +08:00
Matt Johnston
a5eac0a065
add -fsanitize=address for fuzz test again
2018-03-04 15:00:51 +08:00
Matt Johnston
7f15910541
get rid of unused packet_type in encrypted write queue
2018-03-04 14:57:18 +08:00
Matt Johnston
625b38d7af
merge
2018-03-03 11:11:04 +08:00
Matt Johnston
b9edf939f4
add cryptlib for all targets in fuzz build
2018-03-03 11:08:26 +08:00