From d0e5cf78d0c2fbeed35b4bd8f883209b99ccecb5 Mon Sep 17 00:00:00 2001
From: Gauravsingh Sisodia <xaerru@gmail.com>
Date: Mon, 28 Jul 2025 10:23:14 +0000
Subject: [PATCH] fix: use strcmp instead of strncmp to avoid prefix match

Signed-off-by: Gauravsingh Sisodia <xaerru@gmail.com>
Reviewed-by: Jakub Jelen <jjelen@redhat.com>
Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
---
 src/dh-gss.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/dh-gss.c b/src/dh-gss.c
index 88d55082..db646b56 100644
--- a/src/dh-gss.c
+++ b/src/dh-gss.c
@@ -373,7 +373,7 @@ int ssh_server_gss_dh_process_init(ssh_session session, ssh_buffer packet)
         goto error;
     }
 
-    if (strncmp(crypto->kex_methods[SSH_HOSTKEYS], "null", 4) != 0) {
+    if (strcmp(crypto->kex_methods[SSH_HOSTKEYS], "null") != 0) {
         rc =
             ssh_dh_get_next_server_publickey_blob(session, &server_pubkey_blob);
         if (rc != SSH_OK) {