[openssh-commits] [openssh] branch master updated (b0b58222 -> 845ceece)

Tue Jan 3 17:53:39 AEDT 2023

This is an automated email from the git hooks/post-receive script.

dtucker pushed a change to branch master
in repository openssh.

      from  b0b58222  Simply handling of SSH_CONNECTION PAM env var.
       new  5a7a7aca  upstream: The idiomatic way of coping with signed char vs unsigned
       new  e555d5ca  upstream: add a -X option to both scp(1) and sftp(1) to allow
       new  4acfaabf  upstream: add -X to usage();
       new  93f2ce8c  upstream: Clear signal mask early in main(); sshd may have been
       new  797da281  upstream: Mention that scp uses the SFTP protocol and remove
       new  0872663a  upstream: spelling fixes; from paul tagliamonte amendments to his
       new  b3daa8dc  upstream: fix bug in PermitRemoteOpen which caused it to ignore its
       new  845ceece  upstream: regression test for PermitRemoteOpen

The 8 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.

Detailed log of new commits:

commit 845ceecea2ac311b0c267f9ecbd34862e1876fc6
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Mon Jan 2 07:03:57 2023 +0000

    upstream: regression test for PermitRemoteOpen

    OpenBSD-Regress-ID: 8271aafbf5c21950cd5bf966f08e585cebfe630c

commit b3daa8dc582348d6ab8150bc1e571b7aa08c5388
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Mon Jan 2 07:03:30 2023 +0000

    upstream: fix bug in PermitRemoteOpen which caused it to ignore its

    first argument unless it was one of the special keywords "any" or "none".

    Reported by Georges Chaudy in bz3515; ok dtucker@

    OpenBSD-Commit-ID: c5678a39f1ff79993d5ae3cfac5746a4ae148ea5

commit 0872663a7be0301bcc3d49acdbc9b740a3d972d4
Author: jmc at openbsd.org <jmc at openbsd.org>
Date:   Mon Dec 26 19:16:03 2022 +0000

    upstream: spelling fixes; from paul tagliamonte amendments to his

    diff are noted on tech

    OpenBSD-Commit-ID: d776dd03d0b882ca9c83b84f6b384f6f9bd7de4a

commit 797da2812a71785b34890bb6eb44767a7d09cd34
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Fri Dec 16 07:13:22 2022 +0000

    upstream: Mention that scp uses the SFTP protocol and remove

    reference to legacy flag. Spotted by, feedback and ok jmc@

    OpenBSD-Commit-ID: 9dfe04966f52e941966b46c7a2972147f95281b3

commit 93f2ce8c050a7a2a628646c00b40b9b53fef93ef
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Fri Dec 16 06:56:47 2022 +0000

    upstream: Clear signal mask early in main(); sshd may have been

    started with one or more signals masked (sigprocmask(2) is not cleared
    on fork/exec) and this could interfere with various things, e.g. the
    login grace timer.

    Execution environments that fail to clear the signal mask before running
    sshd are clearly broken, but apparently they do exist.

    Reported by Sreedhar Balasubramanian; ok dtucker@

    OpenBSD-Commit-ID: 77078c0b1c53c780269fc0c416f121d05e3010ae

commit 4acfaabfae41badb9d334a2ee88c5c6ad041c0d5
Author: jmc at openbsd.org <jmc at openbsd.org>
Date:   Fri Dec 16 06:52:48 2022 +0000

    upstream: add -X to usage();

    OpenBSD-Commit-ID: 1bdc3df7de11d766587b0428318336dbffe4a9d0

commit e555d5cad5afae7d5ef2bbc02ca591178fe16fed
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Fri Dec 16 03:40:03 2022 +0000

    upstream: add a -X option to both scp(1) and sftp(1) to allow

    control over some SFTP protocol knobs: the copy buffer length and
    the number of inflight requests, both of which are used during
    upload/download.

    Previously these could be controlled in sftp(1) using the -b/-R options.
    This makes them available in both SFTP protocol clients using the same
    option character sequence.

    ok dtucker@

    OpenBSD-Commit-ID: 27502bffc589776f5da1f31df8cb51abe9a15f1c

commit 5a7a7acab2f466dc1d7467b5d05d35268c3137aa
Author: deraadt at openbsd.org <deraadt at openbsd.org>
Date:   Thu Dec 15 18:20:39 2022 +0000

    upstream: The idiomatic way of coping with signed char vs unsigned

    char (which did not come from stdio read functions) in the presence of
    ctype macros, is to always cast to (unsigned char).  casting to (int)
    for a "macro" which is documented to take int, is weird.  And sadly wrong,
    because of the sing extension risk.. same diff from florian

    OpenBSD-Commit-ID: 65b9a49a68e22ff3a0ebd593f363e9f22dd73fea

Summary of changes:
 misc.c                     |  4 +--
 readconf.c                 | 62 ++++++++++++++++++----------------
 regress/dynamic-forward.sh | 84 ++++++++++++++++++++++++++++++++++++----------
 scp.1                      | 29 +++++++++++-----
 scp.c                      | 46 +++++++++++++++++++++----
 sftp-client.c              |  6 ++--
 sftp.1                     | 18 ++++++++--
 sftp.c                     | 33 +++++++++++++++---
 sntrup761.sh               |  4 +--
 ssh-keyscan.c              |  4 +--
 sshd.c                     |  6 +++-
 11 files changed, 219 insertions(+), 77 deletions(-)

-- 
To stop receiving notification emails like this one, please contact
djm at mindrot.org.