Aris Adamantiadis 4e6ff36a9a dh: Fix CVE-2016-0739 ...

Due to a byte/bit confusion, the DH secret was too short. This file was
completely reworked and will be commited in a future version.

Signed-off-by: Aris Adamantiadis <aris@0xbadc0de.be>
Reviewed-by: Andreas Schneider <asn@cryptomilk.org>

2016-02-23 08:16:10 +01:00

..

external

cleanup: use ssh_ prefix in the blf (non-static) functions

2016-01-19 11:31:07 +01:00

threads

cmake: Handle libssh threas library correctly

2015-09-07 07:46:11 +02:00

agent.c

buffer: do not use ssh_buffer_get_rest_len()

2016-01-19 11:31:08 +01:00

auth1.c

cleanup: use ssh_ prefix in the packet (non-static) functions

2016-01-19 11:31:07 +01:00

auth.c

cleanup: use ssh_ prefix in the packet (non-static) functions

2016-01-19 11:31:07 +01:00

base64.c

buffer: fix use-before-nullcheck (coverity #1267979)

2015-02-03 22:21:22 +01:00

bignum.c

cleanup: use ssh_ prefix in the bignum (non-static) functions

2016-01-19 11:31:07 +01:00

bind.c

bind: Correctly close sockets and invalidate them.

2015-04-10 13:32:09 +02:00

buffer.c

buffer: expose ssh_buffer_get()

2016-01-19 11:31:08 +01:00

callbacks.c

src: Update my mail address.

2014-01-07 16:08:23 +01:00

channels1.c

cleanup: use ssh_ prefix in the packet (non-static) functions

2016-01-19 11:31:07 +01:00

channels.c

buffer: do not use ssh_buffer_get_rest_len()

2016-01-19 11:31:08 +01:00

client.c

cleanup: use ssh_ prefix in the packet (non-static) functions

2016-01-19 11:31:07 +01:00

CMakeLists.txt

cmake: Handle libssh threas library correctly

2015-09-07 07:46:11 +02:00

config.c

options: Fix setting the port.

2014-12-25 12:32:16 +01:00

connect.c

connect: Fix a memory leak.

2015-01-14 15:20:52 +01:00

crc32.c

priv: Create crc32.h.

2011-09-18 21:37:17 +02:00

curve25519.c

cleanup: use ssh_ prefix in the packet (non-static) functions

2016-01-19 11:31:07 +01:00

dh.c

dh: Fix CVE-2016-0739

2016-02-23 08:16:10 +01:00

ecdh.c

cleanup: use ssh_ prefix in the packet (non-static) functions

2016-01-19 11:31:07 +01:00

error.c

doc: Fix description of error parameter for ssh_get_error*

2014-01-22 09:45:45 +01:00

gcrypt_missing.c

cleanup: use ssh_ prefix in the gcrypt missing functions

2016-01-19 11:31:07 +01:00

getpass.c

update copyright information

2014-01-07 15:18:15 +01:00

gssapi.c

buffer: use ssh_buffer_get() instead of ssh_buffer_get_begin()

2016-01-19 11:31:08 +01:00

gzip.c

buffer: do not use ssh_buffer_get_rest_len()

2016-01-19 11:31:08 +01:00

init.c

init: Some initialization fixes.

2011-05-01 19:42:50 +02:00

kex1.c

buffer: use ssh_buffer_get() instead of ssh_buffer_get_begin()

2016-01-19 11:31:08 +01:00

kex.c

cleanup: use ssh_ prefix in the packet (non-static) functions

2016-01-19 11:31:07 +01:00

known_hosts.c

buffer: do not use ssh_buffer_get_rest_len()

2016-01-19 11:31:08 +01:00

legacy.c

buffer: use ssh_buffer_get() instead of ssh_buffer_get_begin()

2016-01-19 11:31:08 +01:00

libcrypto.c

libcrypto: Fix build with DEBUG_CRYPTO turned on

2015-10-22 08:17:01 +02:00

libgcrypt.c

Fix a bunch of -Wmaybe-uninitialized

2015-12-17 15:01:05 +01:00

log.c

log: Add check for return value.

2014-06-10 13:52:38 +02:00

match.c

match: Don't dereference 's' directly.

2012-10-09 11:09:34 +02:00

messages.c

buffer: do not use ssh_buffer_get_rest_len()

2016-01-19 11:31:08 +01:00

misc.c

misc: Correctly guard the sys/time.h include

2015-06-24 17:13:19 +02:00

options.c

options: Fix documentation typo

2016-02-23 08:14:29 +01:00

packet1.c

buffer: use ssh_buffer_get() instead of ssh_buffer_get_begin()

2016-01-19 11:31:08 +01:00

packet_cb.c

cleanup: use ssh_ prefix in the dh (non-static) functions

2016-01-19 11:31:07 +01:00

packet_crypt.c

buffer: do not use ssh_buffer_get_rest_len()

2016-01-19 11:31:08 +01:00

packet.c

buffer: do not use ssh_buffer_get_rest_len()

2016-01-19 11:31:08 +01:00

pcap.c

buffer: do not use ssh_buffer_get_rest_len()

2016-01-19 11:31:08 +01:00

pki_container_openssh.c

buffer: use ssh_buffer_get() instead of ssh_buffer_get_begin()

2016-01-19 11:31:08 +01:00

pki_crypto.c

buffer: do not use ssh_buffer_get_rest_len()

2016-01-19 11:31:08 +01:00

pki_ed25519.c

pki: Use the standard logging function

2015-09-07 10:57:34 +02:00

pki_gcrypt.c

buffer: use ssh_buffer_get() instead of ssh_buffer_get_begin()

2016-01-19 11:31:08 +01:00

pki.c

pki: Fixed documentation about return value.

2016-02-23 08:12:34 +01:00

poll.c

misc: Correctly guard the sys/time.h include

2015-06-24 17:13:19 +02:00

scp.c

Revert f2c2687ca6

2014-02-05 22:29:22 +01:00

server.c

cleanup: use ssh_ prefix in the packet (non-static) functions

2016-01-19 11:31:07 +01:00

session.c

cleanup: use ssh_ prefix in the packet (non-static) functions

2016-01-19 11:31:07 +01:00

sftp.c

buffer: do not use ssh_buffer_get_rest_len()

2016-01-19 11:31:08 +01:00

sftpserver.c

buffer: do not use ssh_buffer_get_rest_len()

2016-01-19 11:31:08 +01:00

socket.c

buffer: do not use ssh_buffer_get_rest_len()

2016-01-19 11:31:08 +01:00

string.c

string: Improve ssh_string_len() to avoid tainted variables

2015-05-04 17:54:01 +02:00

threads.c

threads: support libgcrypt 1.6 hack

2014-01-08 18:57:31 +01:00

wrapper.c

libcrypto: clean up EVP functions

2015-09-25 00:05:10 +02:00