[openssh-commits] CVS: fuyu.mindrot.org: openssh

[Damien Miller]

CVSROOT:        /var/cvs
Module name:    openssh
Changes by:     djm at fuyu.mindrot.org 10/07/16 13:57:51

Modified files:
    .               : ChangeLog auth-rsa.c channels.c jpake.c key.c misc.c misc.h monitor.c packet.c ssh-rsa.c

Log message:
   - djm at cvs.openbsd.org 2010/07/13 11:52:06
     [auth-rsa.c channels.c jpake.c key.c misc.c misc.h monitor.c]
     [packet.c ssh-rsa.c]
     implement a timing_safe_cmp() function to compare memory without leaking
     timing information by short-circuiting like memcmp() and use it for
     some of the more sensitive comparisons (though nothing high-value was
     readily attackable anyway); "looks ok" markus@

Diff commands:
cvs -nQq rdiff -u -r1.5616 -r1.5617 openssh/ChangeLog
cvs -nQq rdiff -u -r1.69 -r1.70 openssh/auth-rsa.c
cvs -nQq rdiff -u -r1.297 -r1.298 openssh/channels.c
cvs -nQq rdiff -u -r1.2 -r1.3 openssh/jpake.c
cvs -nQq rdiff -u -r1.91 -r1.92 openssh/key.c
cvs -nQq rdiff -u -r1.101 -r1.102 openssh/misc.c
cvs -nQq rdiff -u -r1.45 -r1.46 openssh/misc.h
cvs -nQq rdiff -u -r1.139 -r1.140 openssh/monitor.c
cvs -nQq rdiff -u -r1.169 -r1.170 openssh/packet.c
cvs -nQq rdiff -u -r1.42 -r1.43 openssh/ssh-rsa.c

ViewVC:
http://anoncvs.mindrot.org/index.cgi/openssh/ChangeLog?r1=1.5616;r2=1.5617&view=patch
http://anoncvs.mindrot.org/index.cgi/openssh/auth-rsa.c?r1=1.69;r2=1.70&view=patch
http://anoncvs.mindrot.org/index.cgi/openssh/channels.c?r1=1.297;r2=1.298&view=patch
http://anoncvs.mindrot.org/index.cgi/openssh/jpake.c?r1=1.2;r2=1.3&view=patch
http://anoncvs.mindrot.org/index.cgi/openssh/key.c?r1=1.91;r2=1.92&view=patch
http://anoncvs.mindrot.org/index.cgi/openssh/misc.c?r1=1.101;r2=1.102&view=patch
http://anoncvs.mindrot.org/index.cgi/openssh/misc.h?r1=1.45;r2=1.46&view=patch
http://anoncvs.mindrot.org/index.cgi/openssh/monitor.c?r1=1.139;r2=1.140&view=patch
http://anoncvs.mindrot.org/index.cgi/openssh/packet.c?r1=1.169;r2=1.170&view=patch
http://anoncvs.mindrot.org/index.cgi/openssh/ssh-rsa.c?r1=1.42;r2=1.43&view=patch

Please note that there may be a delay before commits are available
on the public ViewVC site.