access to buggy openssh-3.x

[Damien Miller]

On Tue, 20 Jan 2009, Rekha Bachwani wrote:

> Hi,
> 
>     I wanted to have access to the openssh-3.x source in which
>     the bugs were reported.  For instance, one of the problems
>     reported in openssh-3.1 was
>     *Bug 182* <https://bugzilla.mindrot.org/show_bug.cgi?id=182> - ssh 
> should still force SIGCHLD to be SIG_DFL when calling ssh-rand-helper
>    
>     When I download openssh-3.1p1, I see the bug fixed.  I would
>     like to reproduce some of the old openssh bugs (for my research),
>     and therefore, need access to the source which actually had
>     bugs or atleast against which the bugs were reported.
> 
>     Does anyone know how to get access to such an code?

You didn't say where you are downloading OpenSSH from.
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH and
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable are the canonical
locations.

That particular bug is not fixed in
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-3.1p1.tar.gz
(I just checked) so I'm not sure what you are looking at.

Also, the entire project history is in CVS with releases tagged and
branched, for example:

cvs -d anoncvs at anoncvs.mindrot.org:/cvs rdiff \
    -r V_3_1_P1 -r V_3_2_2_P1 openssh/entropy.c

Clearly show the fix (along with an unrelated one).

-d