Jakub Jelen d3060bc84e CVE-2021-3634: Create a separate length for session_id ...

Normally, the length of session_id and secret_hash is the same,
but if we will get into rekeying with a peer that changes preference
of key exchange algorithm, the new secret hash can be larger or
smaller than the previous session_id causing invalid reads or writes.

Resolves https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35485

Signed-off-by: Jakub Jelen <jjelen@redhat.com>
Reviewed-by: Andreas Schneider <asn@cryptomilk.org>

2021-08-18 14:16:18 +02:00

..

benchmarks

cmake: Do not use cached LIBSSH_PUBLIC_INCLUDE_DIRS

2019-11-07 16:14:46 +01:00

client

tests: Cover sftp_new_channel function

2021-08-17 15:46:54 +02:00

etc

tests: Fix running ssh-agent

2016-02-03 09:01:29 +01:00

fuzz

threads: Automatically call ssh_init on load

2018-08-03 16:43:03 +02:00

keys

tests: Verify we can authenticate using ed25519 key

2018-10-19 17:43:20 +02:00

pkd

tests: Disable *cbc ciphers in Dropbear tests

2021-08-17 15:46:53 +02:00

server

cmake: Add autogenerated libssh_version.h

2020-05-07 11:59:09 +02:00

sftp_stress

tests: Call ssh_session_is_known_server()

2018-06-27 09:45:35 +02:00

unittests

CVE-2021-3634: Create a separate length for session_id

2021-08-18 14:16:18 +02:00

authentication.c

Add a exec test.

2009-05-04 22:30:21 +00:00

chmodtest.c

Added some other junk test file

2010-05-17 20:08:11 +02:00

chroot_wrapper.c

tests: Temporarily build chroot_wrapper

2017-12-15 12:00:49 +01:00

CMakeLists.txt

CMakeLists: Shorten the keys lists passed to the ssh command

2020-08-13 17:35:09 +02:00

cmdline.c

tests: allow conditionnal execution on pattern

2015-02-02 17:34:15 +01:00

connection.c

preliminary test suite

2008-03-17 02:31:22 +00:00

ctest-default.cmake

tests: Do not trace sshd

2018-10-19 17:42:55 +02:00

generate.py

A few test cases for benchmarks

2009-11-05 18:18:35 +01:00

ssh_ping.c

tests: Add OK: and a new line to ssh_ping

2018-09-18 18:46:28 +02:00

test_exec.c

tests: Call ssh_session_is_known_server()

2018-06-27 09:45:35 +02:00

test_pcap.c

Sanitize libssh namespace + legacy wrappers

2010-05-14 00:51:08 +02:00

test_socket.c

struct socket -> struct ssh_socket_struct +typedef

2009-12-06 22:48:56 +01:00

test_ssh_bind_accept_fd.c

add mbedtls crypto support

2017-12-28 11:17:39 +01:00

test_tunnel.c

tests: Call ssh_session_is_known_server()

2018-06-27 09:45:35 +02:00

tests_config.h.cmake

pkd client run user executable

2020-08-13 17:35:09 +02:00

tests.h

preliminary test suite

2008-03-17 02:31:22 +00:00

torture_cmocka.c

tests: Define LIBSSH_STATIC for torture_cmocka

2018-09-05 11:43:05 +02:00

torture_cmocka.h

torture: Add assert macros for ssh return codes

2018-06-30 14:37:04 +02:00

torture_key.c

pki_crypto: Support Ed25519 keys in PEM files

2019-09-30 16:58:07 +02:00

torture_key.h

libssh: deprecate SSH_KEYTYPE_ECDSA

2019-04-17 10:21:42 +02:00

torture_pki.c

tests: Include config.h in torture_pki.c

2018-11-27 11:52:12 +01:00

torture_pki.h

tests: Move helper functions to a common file

2018-01-10 22:24:11 +01:00

torture.c

tests: Cover sftp_new_channel function

2021-08-17 15:46:54 +02:00

torture.h

tests: Cover sftp_new_channel function

2021-08-17 15:46:54 +02:00

valgrind.supp

valgrind: Add suppression for glibc dlopen issue

2016-01-19 11:03:52 +01:00