Bug in auth-options.c

Han Holl han.holl at prismant.nl
Sat Feb 10 00:31:25 EST 2001


Hi,

There's a nasty bug in auth-open.c that causes all options in a line
of authorized_keys to be applied to all subsequent lines without
options.
IMNSHO this clearly shows the evil of global variables, and using 
extern whatever as a means of information sharing.

Cheers,

Han Holl

--- auth-options.c.orig	Fri Feb  9 14:14:51 2001
+++ auth-options.c	Fri Feb  9 14:18:43 2001
@@ -57,11 +57,12 @@
 auth_parse_options(struct passwd *pw, char *options, unsigned long linenum)
 {
 	const char *cp;
-	if (!options)
-		return 1;
 
 	/* reset options */
 	auth_clear_options();
+
+	if (!options)
+		return 1;
 
 	while (*options && *options != ' ' && *options != '\t') {
 		cp = "no-port-forwarding";





More information about the openssh-unix-dev mailing list