Matt Johnston
bf4058d1df
Preallocate memory for sshpacketmutator. Add fuzzer-client_mutator_nomaths
2020-10-26 23:31:24 +08:00
Matt Johnston
4d716b6302
crossover works
2020-10-26 23:06:41 +08:00
Matt Johnston
1260fbc5cd
Fix fuzz-sshpacketmutator to work
2020-10-26 22:52:07 +08:00
Matt Johnston
acd6a22a0c
Print ascii in printhex too
2020-10-26 22:51:44 +08:00
Matt Johnston
4e8a1da551
Add first try at fuzzing custom mutator
2020-10-25 22:52:36 +08:00
Matt Johnston
754dc50b93
merge from main
2020-10-25 21:47:42 +08:00
Matt Johnston
c7cfa75e92
Disable stderr output for fuzzer by default
2020-10-24 22:40:08 +08:00
Matt Johnston
037d26f055
Add buf_decrpos()
2020-10-24 18:56:45 +08:00
Matt Johnston
cb252296c5
Add some more variation to fuzzer random number generation
2020-10-23 23:32:44 +08:00
Matt Johnston
f37def57b0
Move fuzzing code to fuzz/ subdirectory, improve Makefile.in
2020-10-23 23:10:20 +08:00
Matt Johnston
1a208c460b
Increase MAX_PROPOSED_ALGO to 50, warn if exceeded
2020-10-23 20:53:58 +08:00
Matt Johnston
34f24b1841
Fix #ifdef DROPBEAR_FUZZ (caught by linter)
2020-10-21 20:49:22 +08:00
Matt Johnston
1a7b944917
Load password and key for client fuzzer.
...
Add fuzz_dump()
2020-10-20 23:34:38 +08:00
Matt Johnston
3b400bd64e
Don't sort objects, it breaks -lcrypt ordering
2020-10-20 23:33:45 +08:00
Matt Johnston
f74baa5830
Add ubsan fuzz run to Travis CI too
2020-10-19 23:38:11 +08:00
Matt Johnston
4c5b8fb6d6
Use Dropbear's random source rather than libtommath's platform
2020-10-19 22:49:19 +08:00
Matt Johnston
d5cc5eb25c
Avoid passing NULL to memcpy
2020-10-19 21:38:20 +08:00
Matt Johnston
9f642e2bd4
Fix fuzzer build
2020-10-18 23:32:39 +08:00
Matt Johnston
6ca24af24a
Merge fuzz branch
2020-10-18 22:53:44 +08:00
Matt Johnston
400c7c161f
Allocate real file descriptors for fuzz input with dup()
...
--HG--
branch : fuzz
2020-10-18 22:52:24 +08:00
Matt Johnston
5567c238a7
Disallow extra kexinit messages
...
--HG--
branch : fuzz
2020-10-18 22:17:54 +08:00
Matt Johnston
33eba22966
Add fuzzer-client_nomaths, fix client fuzzer
...
--HG--
branch : fuzz
2020-10-18 15:08:54 +08:00
Matt Johnston
282fc81981
Get client fuzzer building and starting (fails straight away)
...
--HG--
branch : fuzz
2020-10-18 12:17:39 +08:00
Matt Johnston
cc1b07dcf1
Make wrapfd share a common buffer for all FDs
...
--HG--
branch : fuzz
2020-10-15 22:46:24 +08:00
Matt Johnston
0e3e8db5bf
merge from main
...
--HG--
branch : fuzz
2020-10-15 19:55:15 +08:00
Matt Johnston
17873e8c92
Avoid gnu extension conditional operator
2020-10-08 11:00:04 +08:00
Matt Johnston
80e9281701
Change secure.ucc.asn.au/hg to hg.ucc.asn.au
2020-07-28 18:53:48 +08:00
Matt Johnston
926c477188
Added signature for changeset 88f63b8b0f13
2020-06-26 21:57:20 +08:00
Matt Johnston
d999575e34
Added tag DROPBEAR_2020.80 for changeset 73646de50f13
2020-06-26 21:57:18 +08:00
Matt Johnston
5d095e9a27
version 2020.80
2020-06-26 21:45:59 +08:00
Guilhem Moulin
3727b099c5
Don't choke on disabled authorized_keys(5) options
...
As of 2020.79 X11 forwarding is disabled at build time, which could lock
out users with authorized_keys(5) files containing ‘no-X11-forwarding’
options.
2020-06-26 20:56:03 +08:00
Matt Johnston
45294b458a
update CHANGES for 2020.80
2020-06-26 20:55:56 +08:00
Matt Johnston
d51e4a75cd
Some notes on style
2020-06-26 20:41:34 +08:00
Matt Johnston
e9f2815144
Refer to libtom license files
2020-06-25 23:18:16 +08:00
Matt Johnston
2771fab0fa
merge
2020-06-23 22:25:57 +08:00
Matt Johnston
a7a67585cb
move GNU_SOURCE earlier
2020-06-23 22:24:58 +08:00
Ilya
366f01252e
fix trace messages ( #105 )
2020-06-23 22:20:05 +08:00
Matt Johnston
1490c0c3a6
check for poly1305_init in other libtomcrypt configure test
2020-06-23 21:47:54 +08:00
Matt Johnston
3f5c106a88
_GNU_SOURCE for random
2020-06-23 21:38:46 +08:00
Matt Johnston
10e119f638
Disable toom and karatsuba for new libtommath
2020-06-18 19:12:07 +08:00
Matt Johnston
5b68d117c2
Added signature for changeset 4877afd51e04
2020-06-15 23:51:45 +08:00
Matt Johnston
58106b1615
Added tag DROPBEAR_2020.79 for changeset e2e4929d057b
2020-06-15 23:51:39 +08:00
Matt Johnston
1e10af850b
can't call "make lint" without configure
2020-06-15 23:38:08 +08:00
Matt Johnston
ee4b4db816
changelog for 2020.79
2020-06-15 23:36:14 +08:00
Gabor Z. Papp
ab9cfce00d
Fix "make install" for manpages in out-of-tree builds
2020-06-15 23:17:27 +08:00
Matt Johnston
2b8106b14e
Add DEVELOPING.md
2020-06-15 22:30:28 +08:00
Matt Johnston
78c5daee52
Delay seedrandom until connections
2020-06-15 22:24:34 +08:00
Vladislav Grishenko
2301b6ac0b
Disallow leading lines before the ident for server ( #102 )
...
Per RFC4253 4.2 clients must be able to process other lines of data
before the version string, server behavior is not defined neither
with MUST/SHOULD nor with MAY.
If server process up to 50 lines too - it may cause too long hanging
session with invalid/evil client that consume host resources and
potentially may lead to DDoS on poor embedded boxes.
Let's require first line from client to be version string and fail
early if it's not - matches both RFC and real OpenSSH behavior.
2020-06-15 21:22:18 +08:00
Matt Johnston
a27e8b053e
Disable by default 3des, cbc, hmac-sha1-96, x11 forwarding
2020-06-11 00:09:15 +08:00
Matt Johnston
6145289e0d
Remove blowfish
2020-06-10 23:42:42 +08:00
