[Bug 3561] Open SSH does not support 1-byte structure packing on non-windows systems for PKCS11

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Wed Apr 26 09:39:56 AEST 2023


https://bugzilla.mindrot.org/show_bug.cgi?id=3561

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |WONTFIX

--- Comment #6 from Damien Miller <djm at mindrot.org> ---
It's not just one header that was copied though, there are (at least)
four different implementations that have arrived at the same situation
independently. The defacto standard is clear here.

Adding an option to OpenSSH to control pkcs11.h structure packing is
definitely not without cost and it's not clear whether we can make it
work for all the compiler toolchains that we support.

Unless and until there is some PKCS11 module that actually uses packed
structs on Unix, this option would just be a way to break ones
installation in subtle and scary ways.

Given this, we won't be implementing structure packing in OpenSSH. If
an ecosystem of PKCS11 modules that actually require packing emerges,
then feel free to reopen this bug and we can reconsider.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.


More information about the openssh-bugs mailing list