OpenSSH Security Advisory (adv.iss)

Ben Lindstrom mouring at etoh.eviladmin.org
Thu Jun 27 10:17:43 EST 2002


can you grep for  HAVE_MEMMOVE and HAVE_BCOPY in config.h ?

On Wed, 26 Jun 2002, Bob Van Cleef wrote:

>
> On Wed, 26 Jun 2002, Ben Lindstrom wrote:
>
> >
> > Tons or just a few?  I saw one person with a _memmove() issue and it was
> > related to how define.h was being included.
> >
> > I did not have a chance to review and figure out the issue before we went
> > live with 3.4
>
> The _memmove problem is what breaks the compile:
>
> gcc -o ssh-agent ssh-agent.o -L. -Lopenbsd-compat/ -L/usr/local/ssl/lib
> -lssh -lopenbsd-compat -lz  -lcrypto
> collect2: ld returned 2 exit status
> ld: Undefined symbol
>    _memmove
> *** Error code 1
> make: Fatal error: Command failed for target `ssh-agent'
>
> But there are bunches of warnings, not directly related to SSH, that make
> me nervous.  It is a local compiler install issue, not a problem with SSH.
> Such as:
>
> /usr/include/sys/ioctl.h:64: warning: `PENDIN' redefined
> /pathtolib/gcc-lib/sparc-sun-sunos4.1.3/2.7.2/include/termios.h:190:
> warning: this is the location of the previous definition
>
> I've disabled external access to SSH on the impacted system, only allowing
> access from the internal network, so there is no risk, just frustrations.
> <grin>
>
> >
> > On Wed, 26 Jun 2002, Tim Rice wrote:
> >
> > > On Wed, 26 Jun 2002, Bob Van Cleef wrote:
> > >
> > > > Thanks
> > > >
> > > > Unfortunately my SunOS 4.1.4 build is having severe problems.  Tons of
> > > > redefines and problems with _memmove.  Most likely all related to the age
> > > > of the compiler ( 2.7.2 ).
> > >
> > > I'm using gcc 2.7.2.1 on my old SCO 3.2v4.2 box here and it builds 3.4p1
> > >
> > > >
> > > > I'll disable that stuff until I can get a working build.  Sigh... one
> > > > day I will retire those beasts. /grin
> > > >
> > > > Bob
> > > >
> > >
> > > --
> > > Tim Rice				Multitalents	(707) 887-1469
> > > tim at multitalents.net
> > >
> > >
> > > _______________________________________________
> > > openssh-unix-dev at mindrot.org mailing list
> > > http://www.mindrot.org/mailman/listinfo/openssh-unix-dev
> > >
> >
>
>
>




More information about the openssh-unix-dev mailing list