[Bug 3906] Misusing 'Match Host' in server config causes a crash at deferred connection time

[bugzilla-daemon at mindrot.org]

https://bugzilla.mindrot.org/show_bug.cgi?id=3906

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |FIXED
             Status|NEW                         |RESOLVED

--- Comment #7 from Damien Miller <djm at mindrot.org> ---
All done, with regression tests for each:

commit 345892ba2e8efea4be03675c866395bee251c117 (HEAD -> master)
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Fri Dec 19 00:57:42 2025 +0000

    upstream: regression test for bz3906: sshd crashing at connection

    time if the config lacks a subsystem directive but one is defined
in a match
    block.

    OpenBSD-Regress-ID: 5290553665307ccddaec2499ec1eb196bb2efc84

commit 81e5bb8d93f2d8361bd7f4b034044ad8ee4ded0e
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Fri Dec 19 00:48:47 2025 +0000

    upstream: check that invalid subsystem directives inside Match

    blocks are noticed at startup; bz#3906

    OpenBSD-Regress-ID: b9171bde4cc24757a826b3da0e9eadc33995a453

commit 831e6db69ff8625b6e81c2809aa082abbab6c0b1
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Fri Dec 19 00:56:34 2025 +0000

    upstream: don't crash at connection time if the main sshd_config

    lacks any subsystem directive but one is defined in a Match block

    bz#3906; ok dtucker

    OpenBSD-Commit-ID: 2eb9024726d6f10eaa41958faeca9c9ba5ca7d8a

commit 4e0f2dee54d210dc44f72f73e703c6dc5348a406
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Fri Dec 19 00:48:04 2025 +0000

    upstream: detect invalid sshd_config Subsystem directives inside

    Match blocks at startup rather than failing later at runtime;

    noticed via bz#3906; ok dtucker

    OpenBSD-Commit-ID: e6035ff0baa375de6c9f22c883ed530a8649dfed

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.