[Bug 2981] New: Are you sure you want to continue accepts any extra letters after yes or no

[bugzilla-daemon at bugzilla.mindrot.org]

https://bugzilla.mindrot.org/show_bug.cgi?id=2981

            Bug ID: 2981
           Summary: Are you sure you want to continue accepts any extra
                    letters after yes or no
           Product: Portable OpenSSH
           Version: 7.4p1
          Hardware: Other
                OS: Linux
            Status: NEW
          Severity: security
          Priority: P5
         Component: ssh
          Assignee: unassigned-bugs at mindrot.org
          Reporter: troy at box293.com

When you are prompted if you want to continue, y or n is not accepted
however any extra characters after yes or no is accepeted, like yessir
or nosir.

$ ssh xxx at xxx.xxx.xxx.xxx
The authenticity of host 'xxx.xxx.xxx.xxx' can't be established.
RSA key fingerprint is
SHA256:olwf2l6OhbtQ6sOo6OyVDzZy17YLuxkTdmGnmR6746E.
Are you sure you want to continue connecting (yes/no)? n
Please type 'yes' or 'no': nosir
Host key verification failed.

$ ssh xxx at xxx.xxx.xxx.xxx
The authenticity of host 'xxx.xxx.xxx.xxx' can't be established.
RSA key fingerprint is
SHA256:olwf2l6OhbtQ6sOo6OyVDzZy17YLuxkTdmGnmR6746E.
Are you sure you want to continue connecting (yes/no)? y
Please type 'yes' or 'no': yessir
Warning: Permanently added 'xxx.xxx.xxx.xxx' (ECDSA) to the list of
known hosts.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.