dilim/openssh-portable
1
0 Fork 0
mirror of https://github.com/openssh/openssh-portable.git synced 2026-11-06 05:16:43 +00:00
Code Issues Packages Projects Releases Wiki Activity

upstream: have unpriv process reject oversize DH-GEX groups

Browse Source 
rather than just relying on the monitor to do it; improves logging

Anthropic ANT-2026-EHAZM3AZ

OpenBSD-Commit-ID: 76cd63c1381149a9298204cd18bb06c21754ff07
This commit is contained in:
djm@openbsd.org authored and Damien Miller committed 2026-10-30 20:10:14 +11:00
1 parent 340865c6e6
commit 53c77f1bc3
1 file changed
+3 -2
Download Patch File Download Diff File Expand all files Collapse all files
kexgexs.c
+3 -2
View File
@@ -1,4 +1,4 @@
/* $OpenBSD: kexgexs.c,v 1.51 2026/03/03 09:57:25 dtucker Exp $ */
/* $OpenBSD: kexgexs.c,v 1.52 2026/10/30 02:08:03 djm Exp $ */
/*
* Copyright (c) 2000 Niels Provos. All rights reserved.
* Copyright (c) 2001 Markus Friedl. All rights reserved.
@@ -91,7 +91,8 @@ input_kex_dh_gex_request(int type, uint32_t seq, struct ssh *ssh)
nbits = MINIMUM(DH_GRP_MAX, nbits);
if (kex->max < kex->min || kex->nbits < kex->min ||
kex->max < kex->nbits || kex->max < DH_GRP_MIN) {
kex->max < kex->nbits || kex->max < DH_GRP_MIN ||
kex->min > DH_GRP_MAX) {
r = SSH_ERR_DH_GEX_OUT_OF_RANGE;
goto out;
}