OpenSSH Security Advisory (adv.iss)

[Bob Van Cleef]

On Wed, 26 Jun 2002, Ben Lindstrom wrote:

> 
> Tons or just a few?  I saw one person with a _memmove() issue and it was
> related to how define.h was being included.
> 
> I did not have a chance to review and figure out the issue before we went
> live with 3.4

The _memmove problem is what breaks the compile:

gcc -o ssh-agent ssh-agent.o -L. -Lopenbsd-compat/ -L/usr/local/ssl/lib 
-lssh -lopenbsd-compat -lz  -lcrypto
collect2: ld returned 2 exit status
ld: Undefined symbol
   _memmove
*** Error code 1
make: Fatal error: Command failed for target `ssh-agent'

But there are bunches of warnings, not directly related to SSH, that make
me nervous.  It is a local compiler install issue, not a problem with SSH.  
Such as:

/usr/include/sys/ioctl.h:64: warning: `PENDIN' redefined
/pathtolib/gcc-lib/sparc-sun-sunos4.1.3/2.7.2/include/termios.h:190: 
warning: this is the location of the previous definition

I've disabled external access to SSH on the impacted system, only allowing
access from the internal network, so there is no risk, just frustrations.  
<grin>

> 
> On Wed, 26 Jun 2002, Tim Rice wrote:
> 
> > On Wed, 26 Jun 2002, Bob Van Cleef wrote:
> >
> > > Thanks
> > >
> > > Unfortunately my SunOS 4.1.4 build is having severe problems.  Tons of
> > > redefines and problems with _memmove.  Most likely all related to the age
> > > of the compiler ( 2.7.2 ).
> >
> > I'm using gcc 2.7.2.1 on my old SCO 3.2v4.2 box here and it builds 3.4p1
> >
> > >
> > > I'll disable that stuff until I can get a working build.  Sigh... one
> > > day I will retire those beasts. /grin
> > >
> > > Bob
> > >
> >
> > --
> > Tim Rice				Multitalents	(707) 887-1469
> > tim at multitalents.net
> >
> >
> > _______________________________________________
> > openssh-unix-dev at mindrot.org mailing list
> > http://www.mindrot.org/mailman/listinfo/openssh-unix-dev
> >
>