Anderson Toshiyuki Sasaki bab7ba0146 scp: Do not allow newlines in pushed files names ...

When pushing files or directories, encode the newlines contained in the
names as the string "\\n".  This way the user cannot inject protocol
messages through the file name.

Fixes T189

Signed-off-by: Anderson Toshiyuki Sasaki <ansasaki@redhat.com>
Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
Reviewed-by: Jakub Jelen <jjelen@redhat.com>

2019-12-09 16:08:03 +01:00

..

ABI

Bump SO version to 4.8.1

2019-06-14 15:22:56 +02:00

external

sc25519: Fix integer types of sc25519_add()

2019-12-09 16:08:03 +01:00

threads

libcrypto: Fix access violation in ssh_init()

2018-11-30 18:26:55 +01:00

agent.c

agent: Use SSH_BUFFER_FREE()

2019-12-09 16:08:03 +01:00

auth.c

auth: Use SSH_STRING_FREE()

2019-12-09 16:08:03 +01:00

base64.c

base64: Use SSH_BUFFER_FREE()

2019-12-09 16:08:03 +01:00

bignum.c

bignum: Print ssh_make_string_bn() using SSH_LOG()

2019-12-09 16:08:03 +01:00

bind_config.c

bind_config: Fail if a known option couldn't be set

2019-06-12 10:17:54 +02:00

bind.c

Use only one variable denoting the size of methods arrays

2019-11-18 11:59:01 +01:00

buffer.c

buffer: Simplify handling of the return codes

2019-09-24 16:10:33 +02:00

callbacks.c

callbacks: Implement list of callbacks for channels

2016-05-02 16:56:54 +02:00

chachapoly.c

Replace ssh_print_hexa() with ssh_log_hexdump()

2019-07-30 13:26:29 +02:00

channels.c

channels: Use SSH_BUFFER_FREE()

2019-12-09 16:08:03 +01:00

client.c

SSH_LOG: Adjust log level from SSH_LOG_WARNING to SSH_LOG_PROTOCOL

2019-06-13 16:43:44 +02:00

CMakeLists.txt

cmake: Fix building libssh as a static lib on Windows

2019-11-14 21:04:03 +01:00

config_parser.c

config_parser: Implement more useful variant of get_token()

2019-10-01 10:24:01 +02:00

config.c

config: Implement match exec keyword

2019-10-01 10:24:01 +02:00

connect.c

channels: Fix integer and bool argument of channel_default_bufferize()

2019-12-09 16:08:03 +01:00

connector.c

connector: Stop socket-to-channel EOF flooding

2019-04-29 13:16:54 +02:00

curve25519.c

curve25519: Use SSH_STRING_FREE()

2019-12-09 16:08:03 +01:00

dh_crypto.c

dh: Add ssh_dh_debug_crypto()

2019-08-08 09:30:03 +02:00

dh_key.c

dh: Add ssh_dh_debug_crypto()

2019-08-08 09:30:03 +02:00

dh-gex.c

dh-gex: Use SSH_STRING_FREE()

2019-12-09 16:08:03 +01:00

dh.c

dh: Use SSH_STRING_FREE()

2019-12-09 16:08:03 +01:00

ecdh_crypto.c

ecdh_crypto: Use SSH_STRING_FREE()

2019-12-09 16:08:03 +01:00

ecdh_gcrypt.c

ecdh_gcrypt: Use SSH_STRING_FREE()

2019-12-09 16:08:03 +01:00

ecdh_mbedcrypto.c

ecdh_mbedcrypto: Use SSH_STRING_FREE()

2019-12-09 16:08:03 +01:00

ecdh.c

ecdh: Use SSH_STRING_FREE()

2019-12-09 16:08:03 +01:00

error.c

error: Add ssh_reset_error() function

2018-08-27 11:29:18 +02:00

gcrypt_missing.c

dh: Do some basic refactoring

2019-01-24 11:56:23 +01:00

getpass.c

getpass: Use explicit_bzero()

2018-09-04 19:57:31 +02:00

gssapi.c

gssapi: Use SSH_BUFFER_FREE()

2019-12-09 16:08:03 +01:00

gzip.c

gzip: Use SSH_BUFFER_FREE()

2019-12-09 16:08:03 +01:00

init.c

libcrypto: detect non matching headers/shared lib

2018-11-21 16:54:15 +01:00

kdf.c

Use a common KDF function

2019-03-07 12:03:32 +01:00

kex.c

kex: Use SSH_BUFFER_FREE()

2019-12-09 16:08:03 +01:00

known_hosts.c

known_hosts: Avoid using deprecated functions (even from deprecated functions)

2019-09-16 09:35:24 +02:00

knownhosts.c

knownhosts: Use SSH_BUFFER_FREE()

2019-12-09 16:08:03 +01:00

legacy.c

legacy: Fix possible null pointer dereference

2018-10-24 09:48:35 +02:00

libcrypto-compat.c

dh: Add compat function for openssl < 1.1.0

2019-04-04 08:00:31 +02:00

libcrypto-compat.h

dh: Add compat function for openssl < 1.1.0

2019-04-04 08:00:31 +02:00

libcrypto.c

libcrypto: Avoid incompatible pointers

2019-07-30 16:19:32 +02:00

libgcrypt.c

libcrypto: Use SSH_STRING_FREE()

2019-12-09 16:08:03 +01:00

libmbedcrypto.c

wrapper: Make sha{1, 256, 384, 512}() input const

2019-05-13 16:37:51 +02:00

libssh.map

Bump SO version to 4.8.1

2019-06-14 15:22:56 +02:00

log.c

log: Make sure the buffer for date is big enough

2018-08-20 18:42:03 +02:00

match.c

config: Parse Match keyword

2018-09-05 11:43:05 +02:00

mbedcrypto_missing.c

bignum: Pass const to ssh_print_bignum()

2019-08-07 09:49:00 +02:00

messages.c

message: Use SSH_BUFFER_FREE()

2019-12-09 16:08:03 +01:00

misc.c

misc: Add a function to encode newlines

2019-12-09 16:08:03 +01:00

options.c

options: Define constants as unsigned in ssh_options_set()

2019-12-09 16:08:03 +01:00

packet_cb.c

packet_cb: Use SSH_STRING_FREE()

2019-12-09 16:08:03 +01:00

packet_crypt.c

SSH-01-006: Add missing NULL check in ssh_packet_hmac_verify()

2019-12-09 16:08:03 +01:00

packet.c

packet: Use SSH_BUFFER_FREE()

2019-12-09 16:08:03 +01:00

pcap.c

pcap: Use SSH_BUFFER_FREE()

2019-12-09 16:08:03 +01:00

pki_container_openssh.c

pki_container_openssh: Use SSH_BUFFER_FREE()

2019-12-09 16:08:03 +01:00

pki_crypto.c

pki_crypto: Use SSH_BUFFER_FREE()

2019-12-09 16:08:03 +01:00

pki_ed25519_common.c

pki_crypto: Use OpenSSL for Ed25519 signatures

2019-09-24 16:49:35 +02:00

pki_ed25519.c

pki: Move common Ed25519 functions to pki_ed25519_common.c

2019-09-24 16:49:35 +02:00

pki_gcrypt.c

pki_gcrypt: Use SSH_BUFFER_FREE()

2019-12-09 16:08:03 +01:00

pki_mbedcrypto.c

pki_mbedcrypto: Use SSH_BUFFER_FREE()

2019-12-09 16:08:03 +01:00

pki.c

pki: Use SSH_BUFFER_FREE()

2019-12-09 16:08:03 +01:00

poll.c

ssh_event_dopoll can also return SSH_AGAIN

2019-02-27 08:17:53 +01:00

scp.c

scp: Do not allow newlines in pushed files names

2019-12-09 16:08:03 +01:00

server.c

server: Use SSH_STRING_FREE()

2019-12-09 16:08:03 +01:00

session.c

session: Use SSH_BUFFER_FREE()

2019-12-09 16:08:03 +01:00

sftp.c

sftp: Use SSH_BUFFER_FREE()

2019-12-09 16:08:03 +01:00

sftpserver.c

packet_cb: Use SSH_BUFFER_FREE()

2019-12-09 16:08:03 +01:00

socket.c

socket: Use SSH_BUFFER_FREE()

2019-12-09 16:08:03 +01:00

string.c

string: Don't allow to allocate strings bigger than 256M

2018-09-04 12:29:20 +02:00

threads.c

threads: Automatically call ssh_init on load

2018-08-03 16:43:03 +02:00

token.c

token: Added function to remove duplicates

2019-07-04 10:29:20 +02:00

wrapper.c

server: Use really the negotiated signature type

2019-11-07 15:55:32 +01:00