[openssh-commits] [openssh] branch master updated (4821f5dea -> d8b67a63b)

Fri Oct 9 21:38:18 AEDT 2026

This is an automated email from the git hooks/post-receive script.

dtucker pushed a change to branch master
in repository openssh.

    from 4821f5dea upstream: Missing comma. bz#4015, from calestyo at scientia.org.
     new ee2cd0f06 OSS-Fuzz: Add fuzzer targets client session
     new 23ea1207d OSS-Fuzz: Add new fuzzer for sftp server message handling
     new 4c29d4f51 OSS-Fuzz: Add fuzzer targets authfd reply message handling
     new e605578c2 OSS-Fuzz: Add fuzzer for sftp client
     new 57fa7ed41 OSS-Fuzz: Add fuzzer for parsing
     new 45ca56ab9 OSS-Fuzz: Add fuzzer for ssh channels handling
     new d8fe5c7a9 OSS-Fuzz: Add fuzzer for channel request handling
     new 7c734cfd8 OSS-Fuzz: Create fuzzer for sshd auth session
     new 9c7004f6c OSS-Fuzz: Fix kex_fuzz to include rotation and new protocol
     new 9f0005b3b OSS-Fuzz: Add fuzzer targets hostfile handling
     new 5d3c203cd OSS-Fuzz: Add fuzzer for mux processing
     new 0579edc76 fuzz: add sshconfig_fuzz harness for SSH client config parser
     new 50a864825 fuzz: always free key in privkey_fuzz to prevent resource leak
     new e1b1ded82 oss-fuzz: Add new fuzzer for krl operation
     new d8b67a63b Fuzzers are .cc files so also watch them.

The 15 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.

Detailed log of new commits:

commit d8b67a63bcd77061a8dab74eaf4cd46b61e87a28
Author: Darren Tucker <dtucker at dtucker.net>
Date:   Fri Oct 9 21:08:23 2026 +1100

    Fuzzers are .cc files so also watch them.

commit e1b1ded8294a2f9ab646cbcb05e06422b0ce232a
Author: Arthur Chan <arthur.chan at adalogics.com>
Date:   Thu Jan 22 09:46:52 2026 +0000

    oss-fuzz: Add new fuzzer for krl operation

    Signed-off-by: Arthur Chan <arthur.chan at adalogics.com>

commit 50a8648252887ad2c6ccc57b3822362e4ec98117
Author: OwenSanzas <zesheng at tamu.edu>
Date:   Wed Apr 8 23:02:05 2026 +0000

    fuzz: always free key in privkey_fuzz to prevent resource leak

    If sshkey_private_deserialize() fails but partially allocates k,
    the key object is leaked since sshkey_free() is only called on
    success (r == 0). Always call sshkey_free(k) since it is NULL-safe.

    This matches the pattern used in other fuzz harnesses like
    sshsig_fuzz which unconditionally free resources.

commit 0579edc76b8a885cf1d5d693f7146af3d5b9e816
Author: KiloClaw <bot at kiloclaw.ai>
Date:   Sun May 31 03:37:04 2026 +0000

    fuzz: add sshconfig_fuzz harness for SSH client config parser

    Add a libfuzzer harness covering the SSH client configuration file
    parser (readconf.c). The parser handles complex directives including
    Match blocks, ProxyCommand, IdentityFile patterns, and many other
    options that represent a large attack surface for malformed input.

    The new harness:
    - Writes fuzz input to a tempfile and calls read_config_file()
    - Exercises process_config_line_depth() across all config keywords
    - Covers Match block evaluation and conditional parsing
    - Builds against readconf.o, addrmatch.o, misc.o, krl.o

    Also adds sshconfig_fuzz to the TARGETS list in Makefile.

commit 5d3c203cdb5e00bcae4d06463f9f249d40c9c52e
Author: Arthur Chan <arthur.chan at adalogics.com>
Date:   Fri May 29 18:50:19 2026 +0100

    OSS-Fuzz: Add fuzzer for mux processing

    Signed-off-by: Arthur Chan <arthur.chan at adalogics.com>

commit 9f0005b3bb78924fd67937213e02a79a880e388b
Author: Arthur Chan <arthur.chan at adalogics.com>
Date:   Fri May 29 15:44:45 2026 +0100

    OSS-Fuzz: Add fuzzer targets hostfile handling

    Signed-off-by: Arthur Chan <arthur.chan at adalogics.com>

commit 9c7004f6c86faa7cbf746022c903467fd6106e4b
Author: Arthur Chan <arthur.chan at adalogics.com>
Date:   Fri May 29 13:31:00 2026 +0100

    OSS-Fuzz: Fix kex_fuzz to include rotation and new protocol

    Signed-off-by: Arthur Chan <arthur.chan at adalogics.com>

commit 7c734cfd8d2692cbf6e671cd9c846d9cd4121b13
Author: Arthur Chan <arthur.chan at adalogics.com>
Date:   Thu May 28 22:08:30 2026 +0100

    OSS-Fuzz: Create fuzzer for sshd auth session

    Signed-off-by: Arthur Chan <arthur.chan at adalogics.com>

commit d8fe5c7a9373c8136a3359b2eb10500695eed0f7
Author: Arthur Chan <arthur.chan at adalogics.com>
Date:   Thu May 28 21:59:26 2026 +0100

    OSS-Fuzz: Add fuzzer for channel request handling

    Signed-off-by: Arthur Chan <arthur.chan at adalogics.com>

commit 45ca56ab9368097317ec89d7ede24ae60492106e
Author: Arthur Chan <arthur.chan at adalogics.com>
Date:   Thu May 28 17:34:53 2026 +0100

    OSS-Fuzz: Add fuzzer for ssh channels handling

    Signed-off-by: Arthur Chan <arthur.chan at adalogics.com>

commit 57fa7ed4172ed80d0d1d2cdbc05b408425d2a1d3
Author: Arthur Chan <arthur.chan at adalogics.com>
Date:   Thu May 28 17:27:02 2026 +0100

    OSS-Fuzz: Add fuzzer for parsing

    Signed-off-by: Arthur Chan <arthur.chan at adalogics.com>

commit e605578c2506ba9e2552f97e1ef6938690d93501
Author: Arthur Chan <arthur.chan at adalogics.com>
Date:   Wed May 27 19:06:21 2026 +0100

    OSS-Fuzz: Add fuzzer for sftp client

    Signed-off-by: Arthur Chan <arthur.chan at adalogics.com>

commit 4c29d4f512863436490cd5fb1f0bf1f02be83719
Author: Arthur Chan <arthur.chan at adalogics.com>
Date:   Wed May 27 18:45:21 2026 +0100

    OSS-Fuzz: Add fuzzer targets authfd reply message handling

    Signed-off-by: Arthur Chan <arthur.chan at adalogics.com>

commit 23ea1207d48003201071eb081cd803fa44171ac6
Author: Arthur Chan <arthur.chan at adalogics.com>
Date:   Wed May 27 18:31:50 2026 +0100

    OSS-Fuzz: Add new fuzzer for sftp server message handling

    Signed-off-by: Arthur Chan <arthur.chan at adalogics.com>

commit ee2cd0f06b6ab13b69012d099ad0c4a8a9c51e7d
Author: Arthur Chan <arthur.chan at adalogics.com>
Date:   Wed May 27 18:20:25 2026 +0100

    OSS-Fuzz: Add fuzzer targets client session

    Signed-off-by: Arthur Chan <arthur.chan at adalogics.com>

Summary of changes:
 .github/workflows/cifuzz.yml                       |   4 +-
 regress/misc/fuzz-harness/Makefile                 |  50 ++-
 regress/misc/fuzz-harness/authfd_reply_fuzz.cc     | 180 +++++++++
 regress/misc/fuzz-harness/fuzz_arena.c             | 158 ++++++++
 regress/misc/fuzz-harness/hostfile_fuzz.cc         |  91 +++++
 regress/misc/fuzz-harness/kex_fuzz.cc              | 128 +++++-
 regress/misc/fuzz-harness/krl_fuzz.cc              |  64 +++
 regress/misc/fuzz-harness/misc_parse_fuzz.cc       | 167 ++++++++
 regress/misc/fuzz-harness/mux_fuzz.cc              |  23 ++
 regress/misc/fuzz-harness/mux_fuzz_helper.c        | 445 +++++++++++++++++++++
 regress/misc/fuzz-harness/privkey_fuzz.cc          |   4 +-
 .../misc/fuzz-harness/session_channel_req_fuzz.cc  |  41 ++
 .../fuzz-harness/session_channel_req_fuzz_helper.c | 430 ++++++++++++++++++++
 regress/misc/fuzz-harness/sftp_client_fuzz.cc      | 210 ++++++++++
 regress/misc/fuzz-harness/sftp_server_msg_fuzz.cc  |  23 ++
 .../fuzz-harness/sftp_server_msg_fuzz_helper.c     | 193 +++++++++
 regress/misc/fuzz-harness/ssh_channels_fuzz.cc     | 394 ++++++++++++++++++
 .../misc/fuzz-harness/ssh_client_session_fuzz.cc   |  23 ++
 .../fuzz-harness/ssh_client_session_fuzz_helper.c  | 311 ++++++++++++++
 regress/misc/fuzz-harness/sshconfig_fuzz.cc        |  71 ++++
 .../misc/fuzz-harness/sshd_auth_session_fuzz.cc    |  23 ++
 .../fuzz-harness/sshd_auth_session_fuzz_helper.c   | 377 +++++++++++++++++
 22 files changed, 3384 insertions(+), 26 deletions(-)
 create mode 100644 regress/misc/fuzz-harness/authfd_reply_fuzz.cc
 create mode 100644 regress/misc/fuzz-harness/fuzz_arena.c
 create mode 100644 regress/misc/fuzz-harness/hostfile_fuzz.cc
 create mode 100644 regress/misc/fuzz-harness/krl_fuzz.cc
 create mode 100644 regress/misc/fuzz-harness/misc_parse_fuzz.cc
 create mode 100644 regress/misc/fuzz-harness/mux_fuzz.cc
 create mode 100644 regress/misc/fuzz-harness/mux_fuzz_helper.c
 create mode 100644 regress/misc/fuzz-harness/session_channel_req_fuzz.cc
 create mode 100644 regress/misc/fuzz-harness/session_channel_req_fuzz_helper.c
 create mode 100644 regress/misc/fuzz-harness/sftp_client_fuzz.cc
 create mode 100644 regress/misc/fuzz-harness/sftp_server_msg_fuzz.cc
 create mode 100644 regress/misc/fuzz-harness/sftp_server_msg_fuzz_helper.c
 create mode 100644 regress/misc/fuzz-harness/ssh_channels_fuzz.cc
 create mode 100644 regress/misc/fuzz-harness/ssh_client_session_fuzz.cc
 create mode 100644 regress/misc/fuzz-harness/ssh_client_session_fuzz_helper.c
 create mode 100644 regress/misc/fuzz-harness/sshconfig_fuzz.cc
 create mode 100644 regress/misc/fuzz-harness/sshd_auth_session_fuzz.cc
 create mode 100644 regress/misc/fuzz-harness/sshd_auth_session_fuzz_helper.c

-- 
To stop receiving notification emails like this one, please contact
djm at mindrot.org.