Anderson Toshiyuki Sasaki db34fd44fb CVE-2019-14889: misc: Add function to quote file names ...

The added function quote file names strings to be used in a shell.
Special cases are treated for the charactes '\'' and '!'.

Fixes T181

Signed-off-by: Anderson Toshiyuki Sasaki <ansasaki@redhat.com>
Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
(cherry picked from commit c4ad1aba98)

2019-12-09 16:38:36 +01:00

..

ABI

src: Add missing ABI files

2019-11-07 16:19:45 +01:00

external

ed25519: Replace unsigned long long with uint64_t

2019-06-14 15:22:45 +02:00

threads

libcrypto: Fix access violation in ssh_init()

2018-11-30 18:26:55 +01:00

agent.c

agent: Use SHA2 signatures also for RSA certificates

2019-06-13 11:00:56 +02:00

auth.c

auth: Set auto_state->state explicitly

2019-12-09 16:38:35 +01:00

base64.c

Remove vim modelines from all files

2018-06-28 08:41:08 +02:00

bignum.c

bignum: Pass const to ssh_print_bignum()

2019-08-08 09:45:36 +02:00

bind_config.c

bind_config: Fail if a known option couldn't be set

2019-06-12 10:17:54 +02:00

bind.c

Use only one variable denoting the size of methods arrays

2019-12-09 16:38:36 +01:00

buffer.c

buffer: Simplify handling of the return codes

2019-09-30 16:00:30 +02:00

callbacks.c

callbacks: Implement list of callbacks for channels

2016-05-02 16:56:54 +02:00

chachapoly.c

Replace ssh_print_hexa() with ssh_log_hexdump()

2019-08-08 09:44:18 +02:00

channels.c

channels: Initialize states explicitly

2019-12-09 16:38:35 +01:00

client.c

SSH_LOG: Adjust log level from SSH_LOG_WARNING to SSH_LOG_PROTOCOL

2019-06-13 16:43:44 +02:00

CMakeLists.txt

cmake: Fix building libssh as a static lib on Windows

2019-11-18 11:38:27 +01:00

config_parser.c

config: Move common parser functions to config_parser.c

2019-04-01 08:25:22 +02:00

config.c

config: Support match localuser

2019-09-30 15:58:57 +02:00

connect.c

connect: Code style formatting

2019-06-27 10:37:46 +02:00

connector.c

connector: Stop socket-to-channel EOF flooding

2019-04-29 13:16:54 +02:00

curve25519.c

server: Use really the negotiated signature type

2019-11-07 16:14:46 +01:00

dh_crypto.c

dh: Add ssh_dh_debug_crypto()

2019-08-08 09:45:38 +02:00

dh_key.c

dh: Add ssh_dh_debug_crypto()

2019-08-08 09:45:38 +02:00

dh-gex.c

dh-gex: Correctly free modulus and generator with openssl

2019-09-30 16:00:09 +02:00

dh.c

server: Use really the negotiated signature type

2019-11-07 16:14:46 +01:00

ecdh_crypto.c

server: Use really the negotiated signature type

2019-11-07 16:14:46 +01:00

ecdh_gcrypt.c

server: Use really the negotiated signature type

2019-11-07 16:14:46 +01:00

ecdh_mbedcrypto.c

server: Use really the negotiated signature type

2019-11-07 16:14:46 +01:00

ecdh.c

kex: use runtime callbacks (server)

2019-01-24 09:19:59 +01:00

error.c

error: Add ssh_reset_error() function

2018-08-27 11:29:18 +02:00

gcrypt_missing.c

dh: Do some basic refactoring

2019-01-24 11:56:23 +01:00

getpass.c

getpass: Use explicit_bzero()

2018-09-04 19:57:31 +02:00

gssapi.c

gssapi: Add missing malloc checks

2019-04-29 13:17:21 +02:00

gzip.c

gzip: Add missing NULL check

2019-05-28 09:18:52 +02:00

init.c

libcrypto: detect non matching headers/shared lib

2018-11-21 16:54:15 +01:00

kdf.c

Use a common KDF function

2019-03-07 12:03:32 +01:00

kex.c

Use only one variable denoting the size of methods arrays

2019-12-09 16:38:36 +01:00

known_hosts.c

known_hosts: Avoid using deprecated functions (even from deprecated functions)

2019-09-30 15:42:26 +02:00

knownhosts.c

knownhosts: Use ssh_mkdirs() instead of ssh_mkdir()

2019-08-08 09:45:08 +02:00

legacy.c

legacy: Fix possible null pointer dereference

2018-10-24 09:48:35 +02:00

libcrypto-compat.c

dh: Add compat function for openssl < 1.1.0

2019-04-04 08:00:31 +02:00

libcrypto-compat.h

dh: Add compat function for openssl < 1.1.0

2019-04-04 08:00:31 +02:00

libcrypto.c

libcrypto: Avoid incompatible pointers

2019-08-08 09:44:54 +02:00

libgcrypt.c

wrapper: Make sha{1, 256, 384, 512}() input const

2019-05-13 16:37:51 +02:00

libmbedcrypto.c

wrapper: Make sha{1, 256, 384, 512}() input const

2019-05-13 16:37:51 +02:00

libssh.map

Bump SO version to 4.8.1

2019-06-14 15:22:56 +02:00

log.c

log: Make sure the buffer for date is big enough

2018-08-20 18:42:03 +02:00

match.c

config: Parse Match keyword

2018-09-05 11:43:05 +02:00

mbedcrypto_missing.c

bignum: Pass const to ssh_print_bignum()

2019-08-08 09:45:36 +02:00

messages.c

messages: Set signature state explicitly

2019-12-09 16:38:35 +01:00

misc.c

CVE-2019-14889: misc: Add function to quote file names

2019-12-09 16:38:36 +01:00

options.c

Use only one variable denoting the size of methods arrays

2019-12-09 16:38:36 +01:00

packet_cb.c

kex: use runtime callbacks (client)

2019-01-24 09:11:30 +01:00

packet_crypt.c

packet_crypt: Avoid out of bounds access in debug functions

2019-10-25 16:11:17 +02:00

packet.c

packet: Do not deref a NULL pointer in ssh_packet_set_newkeys()

2019-12-09 16:38:36 +01:00

pcap.c

pcap: Correctly initialize sockaddr_in in ssh_pcap_context_set_file()

2019-01-22 13:12:25 +01:00

pki_container_openssh.c

pki_crypto: Use OpenSSL for Ed25519 signatures

2019-09-30 16:57:23 +02:00

pki_crypto.c

pki_crypto: Support Ed25519 keys in PEM files

2019-09-30 16:58:07 +02:00

pki_ed25519_common.c

pki_crypto: Use OpenSSL for Ed25519 signatures

2019-09-30 16:57:23 +02:00

pki_ed25519.c

pki: Move common Ed25519 functions to pki_ed25519_common.c

2019-09-30 16:57:16 +02:00

pki_gcrypt.c

pki: Remove unused function pki_signature_verify()

2019-09-30 16:57:31 +02:00

pki_mbedcrypto.c

pki: Remove unused function pki_signature_verify()

2019-09-30 16:57:31 +02:00

pki.c

server: Use really the negotiated signature type

2019-11-07 16:14:46 +01:00

poll.c

ssh_event_dopoll can also return SSH_AGAIN

2019-02-27 08:17:53 +01:00

scp.c

CVE-2019-14889: scp: Log SCP warnings received from the server

2019-12-09 16:38:36 +01:00

server.c

Use only one variable denoting the size of methods arrays

2019-12-09 16:38:36 +01:00

session.c

Use only one variable denoting the size of methods arrays

2019-12-09 16:38:36 +01:00

sftp.c

sftp: Do not mix integer types

2019-06-14 15:22:45 +02:00

sftpserver.c

sftpserver: allocate packet on sftp_server_new

2018-09-25 16:41:54 +02:00

socket.c

socket: Do not process stderr of proxy commands (Fixes T130)

2019-06-24 15:41:53 +02:00

string.c

string: Don't allow to allocate strings bigger than 256M

2018-09-04 12:29:20 +02:00

threads.c

threads: Automatically call ssh_init on load

2018-08-03 16:43:03 +02:00

token.c

token: Added function to remove duplicates

2019-07-04 11:26:19 +02:00

wrapper.c

server: Use really the negotiated signature type

2019-11-07 16:14:46 +01:00