git: 0194e6d04277 - vendor/openssh - Vendor import of OpenSSH 8.1p1
Ed Maste
emaste at FreeBSD.org
Sun Feb 14 21:04:10 UTC 2021
The branch vendor/openssh has been updated by emaste:
URL: https://cgit.FreeBSD.org/src/commit/?id=0194e6d04277a638afac6c4a664d3bc6a0d944eb
commit 0194e6d04277a638afac6c4a664d3bc6a0d944eb
Author: Ed Maste <emaste at FreeBSD.org>
AuthorDate: 2021-02-14 21:00:25 +0000
Commit: Ed Maste <emaste at FreeBSD.org>
CommitDate: 2021-02-14 21:00:25 +0000
Vendor import of OpenSSH 8.1p1
---
.depend | 18 +-
.skipped-commit-ids | 5 +
CREDITS | 2 +-
ChangeLog | 13612 ++++++++++---------
INSTALL | 22 +-
LICENCE | 2 +-
Makefile.in | 43 +-
PROTOCOL.sshsig | 99 +
README | 2 +-
README.privsep | 11 +-
auth-bsdauth.c | 2 -
auth-options.c | 77 +-
auth-options.h | 5 +-
auth-pam.c | 32 +-
auth-rhosts.c | 11 +-
auth.c | 18 +-
auth.h | 8 +-
auth2-chall.c | 3 +-
auth2-hostbased.c | 3 +-
auth2-kbdint.c | 5 +-
auth2-passwd.c | 4 +-
auth2-pubkey.c | 72 +-
auth2.c | 8 +-
authfd.c | 36 +-
authfd.h | 5 +-
authfile.c | 58 +-
authfile.h | 7 +-
canohost.c | 6 +-
channels.c | 101 +-
cipher.c | 5 +-
cipher.h | 4 +-
clientloop.c | 19 +-
config.h.in | 31 +-
configure | 268 +-
configure.ac | 69 +-
contrib/cygwin/README | 2 +-
contrib/findssl.sh | 0
contrib/redhat/gnome-ssh-askpass.sh | 0
contrib/redhat/openssh.spec | 2 +-
contrib/solaris/README | 0
contrib/suse/openssh.spec | 2 +-
crc32.c | 105 -
crc32.h | 30 -
defines.h | 18 +-
dh.c | 8 +-
dh.h | 7 +-
digest-libc.c | 28 +-
digest-openssl.c | 8 +-
dns.c | 1 -
entropy.c | 13 +-
hmac.c | 4 +-
hostfile.c | 10 +-
kex.c | 105 +-
kex.h | 9 +-
kexecdh.c | 28 +
kexgen.c | 3 +-
krl.c | 5 +-
krl.h | 4 +-
log.h | 4 +-
loginrec.c | 2 +
mac.c | 7 +-
match.c | 4 +-
misc.c | 139 +-
misc.h | 8 +-
moduli | 902 +-
moduli.0 | 2 +-
moduli.c | 6 +-
monitor.c | 14 +-
monitor_wrap.c | 4 +-
monitor_wrap.h | 4 +-
mux.c | 8 +-
myproposal.h | 4 +-
nchan.c | 6 +-
openbsd-compat/Makefile.in | 2 +-
openbsd-compat/bsd-closefrom.c | 88 +-
openbsd-compat/bsd-misc.c | 4 +-
openbsd-compat/bsd-openpty.c | 9 +
openbsd-compat/bsd-setres_id.c | 12 +-
openbsd-compat/bsd-signal.c | 1 +
openbsd-compat/memmem.c | 69 +
openbsd-compat/openbsd-compat.h | 24 +-
openbsd-compat/port-irix.c | 2 +
openbsd-compat/port-solaris.c | 6 +-
openbsd-compat/pwcache.c | 4 +-
openbsd-compat/regress/snprintftest.c | 3 +-
openbsd-compat/regress/utimensattest.c | 33 +-
openbsd-compat/setproctitle.c | 1 +
openbsd-compat/sha1.c | 13 +-
openbsd-compat/sha2.c | 334 +-
openbsd-compat/sha2.h | 138 +-
packet.c | 17 +-
packet.h | 2 +-
platform.c | 1 +
progressmeter.c | 6 +-
readconf.c | 33 +-
readpass.c | 10 +-
regress/Makefile | 38 +-
regress/README.regress | 80 +-
regress/addrmatch.sh | 0
regress/agent-pkcs11.sh | 0
regress/agent-timeout.sh | 4 +-
regress/agent.sh | 9 +-
regress/cert-file.sh | 0
regress/cert-hostkey.sh | 12 +-
regress/cert-userkey.sh | 19 +-
regress/cfgmatch.sh | 49 +-
regress/cfgparse.sh | 0
regress/conch-ciphers.sh | 4 +-
regress/dhgex.sh | 12 +-
regress/forward-control.sh | 0
regress/forwarding.sh | 38 +-
regress/host-expand.sh | 0
regress/hostkey-agent.sh | 0
regress/hostkey-rotate.sh | 74 +-
regress/integrity.sh | 4 +-
regress/kextype.sh | 0
regress/key-options.sh | 0
regress/keygen-convert.sh | 12 +-
regress/keygen-knownhosts.sh | 0
regress/keygen-moduli.sh | 15 +-
regress/keys-command.sh | 6 +-
regress/keytype.sh | 12 +-
regress/krl.sh | 31 +-
regress/limit-keytype.sh | 56 +-
regress/localcommand.sh | 0
regress/misc/fuzz-harness/Makefile | 16 +-
regress/misc/fuzz-harness/sshsig_fuzz.cc | 35 +
regress/misc/fuzz-harness/sshsigopt_fuzz.cc | 29 +
regress/modpipe.c | 0
regress/multiplex.sh | 10 +-
regress/multipubkey.sh | 0
regress/portnum.sh | 0
regress/principals-command.sh | 11 +-
regress/putty-ciphers.sh | 0
regress/putty-kex.sh | 0
regress/putty-transfer.sh | 0
regress/scp-ssh-wrapper.sh | 14 +-
regress/scp.sh | 14 +-
regress/sftp-chroot.sh | 0
regress/sshcfgparse.sh | 29 +-
regress/sshsig.sh | 196 +
regress/test-exec.sh | 51 +-
regress/unittests/Makefile | 4 +-
regress/unittests/bitmap/tests.c | 4 +
regress/unittests/conversion/tests.c | 4 +-
regress/unittests/hostkeys/mktestdata.sh | 0
regress/unittests/hostkeys/test_iterate.c | 28 +-
regress/unittests/kex/test_kex.c | 12 +-
.../unittests/sshbuf/test_sshbuf_getput_basic.c | 231 +-
.../unittests/sshbuf/test_sshbuf_getput_crypto.c | 3 +
regress/unittests/sshbuf/test_sshbuf_getput_fuzz.c | 8 +-
regress/unittests/sshbuf/test_sshbuf_misc.c | 71 +-
regress/unittests/sshbuf/tests.c | 2 +
regress/unittests/sshkey/common.c | 6 +-
regress/unittests/sshkey/test_file.c | 8 +-
regress/unittests/sshkey/test_fuzz.c | 14 +-
regress/unittests/sshkey/test_sshkey.c | 42 +-
regress/unittests/sshkey/testdata/ed25519_1_pw | 12 +-
regress/unittests/test_helper/test_helper.c | 29 +-
regress/unittests/test_helper/test_helper.h | 4 +
regress/unittests/utf8/tests.c | 2 +
sandbox-seccomp-filter.c | 42 +-
sandbox-systrace.c | 1 -
scp.0 | 4 +-
scp.1 | 6 +-
scp.c | 28 +-
servconf.c | 30 +-
servconf.h | 4 +-
serverloop.c | 8 +-
session.c | 48 +-
sftp-client.c | 12 +-
sftp-glob.c | 3 +-
openbsd-compat/realpath.c => sftp-realpath.c | 13 +-
sftp-server-main.c | 3 +-
sftp-server.0 | 2 +-
sftp-server.c | 29 +-
sftp.0 | 28 +-
sftp.1 | 44 +-
sftp.c | 29 +-
ssh-add.0 | 2 +-
ssh-add.c | 13 +-
ssh-agent.0 | 2 +-
ssh-agent.c | 21 +-
ssh-keygen.0 | 149 +-
ssh-keygen.1 | 194 +-
ssh-keygen.c | 594 +-
ssh-keyscan.0 | 2 +-
ssh-keyscan.c | 22 +-
ssh-keysign.0 | 2 +-
ssh-keysign.c | 7 +-
ssh-pkcs11-helper.0 | 2 +-
ssh-pkcs11-helper.c | 27 +-
ssh-pkcs11.c | 105 +-
ssh.0 | 4 +-
ssh.1 | 6 +-
ssh.c | 35 +-
ssh_api.c | 44 +-
ssh_config.0 | 94 +-
ssh_config.5 | 84 +-
sshbuf-getput-basic.c | 166 +-
sshbuf-misc.c | 96 +-
sshbuf.h | 53 +-
sshconnect.c | 67 +-
sshconnect.h | 9 +-
sshconnect2.c | 43 +-
sshd.0 | 2 +-
sshd.c | 41 +-
sshd_config.0 | 50 +-
sshd_config.5 | 54 +-
sshkey-xmss.c | 29 +-
sshkey.c | 444 +-
sshkey.h | 31 +-
sshlogin.c | 2 +-
sshpty.c | 22 +-
sshsig.c | 801 ++
sshsig.h | 92 +
uidswap.c | 38 +-
umac.h | 6 +-
uuencode.c | 95 -
uuencode.h | 29 -
version.h | 4 +-
xmalloc.c | 12 +-
xmalloc.h | 3 +-
xmss_commons.c | 2 +-
xmss_fast.c | 2 +-
xmss_hash.c | 2 +-
xmss_hash_address.c | 2 +-
xmss_wots.c | 2 +-
228 files changed, 13011 insertions(+), 9286 deletions(-)
diff --git a/.depend b/.depend
index c6725ec77125..0ec0736d8189 100644
--- a/.depend
+++ b/.depend
@@ -42,7 +42,6 @@ cleanup.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compa
clientloop.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h openbsd-compat/sys-queue.h xmalloc.h ssh.h ssh2.h packet.h dispatch.h sshbuf.h compat.h channels.h sshkey.h cipher.h cipher-chachapoly.h chacha.h poly1305.h cipher-aesctr.h rijndael.h kex.h mac.h crypto_api.h
clientloop.o: myproposal.h log.h misc.h readconf.h clientloop.h sshconnect.h authfd.h atomicio.h sshpty.h match.h msg.h ssherr.h hostfile.h
compat.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h xmalloc.h packet.h openbsd-compat/sys-queue.h dispatch.h compat.h log.h match.h kex.h mac.h crypto_api.h
-crc32.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h crc32.h
dh.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h
digest-libc.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h ssherr.h sshbuf.h digest.h
digest-openssl.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h
@@ -64,7 +63,7 @@ kex.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h
kex.o: misc.h monitor.h ssherr.h sshbuf.h digest.h
kexc25519.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h sshkey.h kex.h mac.h crypto_api.h sshbuf.h digest.h ssherr.h ssh2.h
kexdh.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h
-kexecdh.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h
+kexecdh.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h ssherr.h
kexgen.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h sshkey.h kex.h mac.h crypto_api.h log.h packet.h openbsd-compat/sys-queue.h dispatch.h ssh2.h sshbuf.h digest.h ssherr.h
kexgex.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h
kexgexc.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h
@@ -87,8 +86,8 @@ monitor_wrap.o: auth-options.h packet.h dispatch.h log.h monitor.h monitor_wrap.
msg.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h sshbuf.h ssherr.h log.h atomicio.h msg.h misc.h
mux.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h openbsd-compat/sys-queue.h xmalloc.h log.h ssh.h ssh2.h pathnames.h misc.h match.h sshbuf.h channels.h msg.h packet.h dispatch.h monitor_fdpass.h sshpty.h sshkey.h readconf.h clientloop.h ssherr.h
nchan.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h openbsd-compat/sys-queue.h ssh2.h sshbuf.h ssherr.h packet.h dispatch.h channels.h compat.h log.h
-packet.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h openbsd-compat/sys-queue.h xmalloc.h crc32.h compat.h ssh2.h cipher.h cipher-chachapoly.h chacha.h poly1305.h cipher-aesctr.h rijndael.h sshkey.h kex.h mac.h crypto_api.h digest.h log.h canohost.h misc.h channels.
h
-packet.o: ssh.h packet.h dispatch.h ssherr.h sshbuf.h
+packet.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h openbsd-compat/sys-queue.h xmalloc.h compat.h ssh2.h cipher.h cipher-chachapoly.h chacha.h poly1305.h cipher-aesctr.h rijndael.h sshkey.h kex.h mac.h crypto_api.h digest.h log.h canohost.h misc.h channels.h ssh.h
+packet.o: packet.h dispatch.h ssherr.h sshbuf.h
platform-misc.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h
platform-pledge.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h
platform-tracing.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h log.h
@@ -118,22 +117,23 @@ session.o: rijndael.h hostfile.h auth.h auth-pam.h audit.h loginrec.h auth-optio
sftp-client.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h openbsd-compat/sys-queue.h xmalloc.h ssherr.h sshbuf.h log.h atomicio.h progressmeter.h misc.h utf8.h sftp.h sftp-common.h sftp-client.h openbsd-compat/glob.h
sftp-common.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h xmalloc.h ssherr.h sshbuf.h log.h misc.h sftp.h sftp-common.h
sftp-glob.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h xmalloc.h sftp.h sftp-common.h sftp-client.h openbsd-compat/glob.h
+sftp-realpath.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h
sftp-server-main.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h log.h sftp.h misc.h xmalloc.h
sftp-server.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h xmalloc.h sshbuf.h ssherr.h log.h misc.h match.h uidswap.h sftp.h sftp-common.h
sftp.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h xmalloc.h log.h pathnames.h misc.h utf8.h sftp.h ssherr.h sshbuf.h sftp-common.h sftp-client.h openbsd-compat/glob.h
sntrup4591761.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h crypto_api.h
-ssh-add.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h openbsd-compat/openssl-compat.h xmalloc.h ssh.h log.h sshkey.h sshbuf.h authfd.h authfile.h pathnames.h misc.h ssherr.h digest.h
+ssh-add.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h xmalloc.h ssh.h log.h sshkey.h sshbuf.h authfd.h authfile.h pathnames.h misc.h ssherr.h digest.h
ssh-agent.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h openbsd-compat/sys-queue.h xmalloc.h ssh.h sshbuf.h sshkey.h authfd.h compat.h log.h misc.h digest.h ssherr.h match.h
ssh-dss.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h
ssh-ecdsa.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h
ssh-ed25519.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h crypto_api.h log.h sshbuf.h sshkey.h ssherr.h ssh.h
-ssh-keygen.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h xmalloc.h sshkey.h authfile.h uuencode.h sshbuf.h pathnames.h log.h misc.h match.h hostfile.h dns.h ssh.h ssh2.h ssherr.h ssh-pkcs11.h atomicio.h krl.h digest.h utf8.h authfd.h
+ssh-keygen.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h xmalloc.h sshkey.h authfile.h sshbuf.h pathnames.h log.h misc.h match.h hostfile.h dns.h ssh.h ssh2.h ssherr.h ssh-pkcs11.h atomicio.h krl.h digest.h utf8.h authfd.h sshsig.h
ssh-keyscan.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h openbsd-compat/sys-queue.h xmalloc.h ssh.h sshbuf.h sshkey.h cipher.h cipher-chachapoly.h chacha.h poly1305.h cipher-aesctr.h rijndael.h kex.h mac.h crypto_api.h compat.h myproposal.h packet.h dispatch.h log.
h
ssh-keyscan.o: atomicio.h misc.h hostfile.h ssherr.h ssh_api.h ssh2.h dns.h
ssh-keysign.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h xmalloc.h log.h sshkey.h ssh.h ssh2.h misc.h sshbuf.h authfile.h msg.h canohost.h pathnames.h readconf.h uidswap.h ssherr.h
ssh-pkcs11-client.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h
ssh-pkcs11-helper.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h openbsd-compat/sys-queue.h xmalloc.h sshbuf.h log.h misc.h sshkey.h authfd.h ssh-pkcs11.h ssherr.h
-ssh-pkcs11.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h
+ssh-pkcs11.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h log.h sshkey.h
ssh-rsa.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h
ssh-xmss.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h
ssh.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h openbsd-compat/openssl-compat.h openbsd-compat/sys-queue.h xmalloc.h ssh.h ssh2.h canohost.h compat.h cipher.h cipher-chachapoly.h chacha.h poly1305.h cipher-aesctr.h rijndael.h digest.h packet.h dispatch.h sshbuf.h
@@ -152,16 +152,16 @@ sshd.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h
sshd.o: cipher-aesctr.h rijndael.h digest.h sshkey.h kex.h mac.h crypto_api.h myproposal.h authfile.h pathnames.h atomicio.h canohost.h hostfile.h auth.h auth-pam.h audit.h loginrec.h authfd.h msg.h channels.h session.h monitor.h monitor_wrap.h ssh-sandbox.h auth-options.h version.h ssherr.h
ssherr.o: ssherr.h
sshkey-xmss.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h
-sshkey.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h crypto_api.h ssh2.h ssherr.h misc.h sshbuf.h cipher.h cipher-chachapoly.h chacha.h poly1305.h cipher-aesctr.h rijndael.h digest.h sshkey.h sshkey-xmss.h match.h xmss_fast.h openbsd-compat/openssl-compat.h
+sshkey.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h crypto_api.h ssh2.h ssherr.h misc.h sshbuf.h cipher.h cipher-chachapoly.h chacha.h poly1305.h cipher-aesctr.h rijndael.h digest.h sshkey.h match.h openbsd-compat/openssl-compat.h
sshlogin.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h sshlogin.h ssherr.h loginrec.h log.h sshbuf.h misc.h servconf.h
sshpty.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h sshpty.h log.h misc.h
+sshsig.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h authfd.h authfile.h log.h misc.h sshbuf.h sshsig.h ssherr.h sshkey.h match.h digest.h
sshtty.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h sshpty.h
ttymodes.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h packet.h openbsd-compat/sys-queue.h dispatch.h log.h compat.h sshbuf.h ssherr.h ttymodes.h
uidswap.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h log.h uidswap.h xmalloc.h
umac.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h xmalloc.h umac.h misc.h rijndael.h
umac128.o: umac.c includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h xmalloc.h umac.h misc.h rijndael.h
utf8.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h utf8.h
-uuencode.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h xmalloc.h uuencode.h
verify.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h crypto_api.h
xmalloc.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h xmalloc.h log.h
xmss_commons.o: includes.h config.h defines.h platform.h openbsd-compat/openbsd-compat.h openbsd-compat/base64.h openbsd-compat/sigact.h openbsd-compat/readpassphrase.h openbsd-compat/vis.h openbsd-compat/getrrsetbyname.h openbsd-compat/sha1.h openbsd-compat/sha2.h openbsd-compat/rmd160.h openbsd-compat/md5.h openbsd-compat/blf.h openbsd-compat/getopt.h openbsd-compat/bsd-misc.h openbsd-compat/bsd-setres_id.h openbsd-compat/bsd-signal.h openbsd-compat/bsd-statvfs.h openbsd-compat/bsd-waitpid.h openbsd-compat/bsd-poll.h openbsd-compat/fake-rfc2553.h openbsd-compat/bsd-cygwin_util.h openbsd-compat/port-aix.h openbsd-compat/port-irix.h openbsd-compat/port-linux.h openbsd-compat/port-solaris.h openbsd-compat/port-net.h openbsd-compat/port-uw.h openbsd-compat/bsd-nextstep.h entropy.h
diff --git a/.skipped-commit-ids b/.skipped-commit-ids
index 01d447a49c43..dd573532f27d 100644
--- a/.skipped-commit-ids
+++ b/.skipped-commit-ids
@@ -6,6 +6,11 @@ fa728823ba21c4b45212750e1d3a4b2086fd1a62 more Makefile refactoring
814b2f670df75759e1581ecef530980b2b3d7e0f remove redundant make defs
04431e8e7872f49a2129bf080a6b73c19d576d40 moduli update
c07772f58028fda683ee6abd41c73da3ff70d403 moduli update
+db6375fc302e3bdf07d96430c63c991b2c2bd3ff moduli update
+5ea3d63ab972691f43e9087ab5fd8376d48e898f uuencode.c Makefile accident
+99dd10e72c04e93849981d43d64c946619efa474 include sshbuf-misc.c
+9e1c23476bb845f3cf3d15d9032da3ed0cb2fcf5 sshbuf-misc.c in regress
+569f08445c27124ec7c7f6c0268d844ec56ac061 Makefile tweaks for !openssl
Old upstream tree:
diff --git a/CREDITS b/CREDITS
index 43be5e5f26d5..6cc3512515eb 100644
--- a/CREDITS
+++ b/CREDITS
@@ -33,7 +33,7 @@ David Agraz <dagraz at jahoopa.com> - Build fixes
David Del Piero <David.DelPiero at qed.qld.gov.au> - bug fixes
David Hesprich <darkgrue at gue-tech.org> - Configure fixes
David Rankin <drankin at bohemians.lexington.ky.us> - libwrap, AIX, NetBSD fixes
-Dag-Erling Smørgrav <des at freebsd.org> - Challenge-Response PAM code.
+Dag-Erling Smørgrav <des at freebsd.org> - Challenge-Response PAM code.
Dhiraj Gulati <dgulati at sco.com> - UnixWare long passwords
Ed Eden <ede370 at stl.rural.usda.gov> - configure fixes
Garrick James <garrick at james.net> - configure fixes
diff --git a/ChangeLog b/ChangeLog
index fdc0a0619c63..baa9a3fb1e88 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,10342 +1,10470 @@
-commit fd0fa130ecf06d7d092932adcd5d77f1549bfc8d
+commit cdf1d0a9f5d18535e0a18ff34860e81a6d83aa5c
Author: Damien Miller <djm at mindrot.org>
-Date: Thu Apr 18 08:52:57 2019 +1000
+Date: Wed Oct 9 11:31:03 2019 +1100
- makedepend
+ prepare for 8.1 release
-commit 5de397a876b587ba05a9169237deffdc71f273b0
-Author: Damien Miller <djm at mindrot.org>
-Date: Fri Apr 5 11:29:51 2019 -0700
+commit 3b4e56d740b74324e2d7542957cad5a11518f455
+Author: djm at openbsd.org <djm at openbsd.org>
+Date: Wed Oct 9 00:04:57 2019 +0000
- second thoughts: leave README in place
+ upstream: openssh-8.1
- A number of contrib/* files refer to the existing README so let's leave
- it in place for release and add the new markdown version in parallel.
-
- I'll get rid of README after release.
+ OpenBSD-Commit-ID: 3356bb34e2aa287f0e6d6773c9ae659dc680147d
-commit 5d3127d9274519b25ed10e320f45045ba8d7f3be
-Author: Damien Miller <djm at mindrot.org>
-Date: Fri Apr 5 11:29:31 2019 -0700
+commit 29e0ecd9b4eb3b9f305e2240351f0c59cad9ef81
+Author: djm at openbsd.org <djm at openbsd.org>
+Date: Wed Oct 9 00:04:42 2019 +0000
- Revert "rewrite README"
+ upstream: fix an unreachable integer overflow similar to the XMSS
- This reverts commit 9444d82678cb7781820da4d1c23b3c2b9fb1e12f.
+ case, and some other NULL dereferences found by fuzzing.
+
+ fix with and ok markus@
+
+ OpenBSD-Commit-ID: 0f81adbb95ef887ce586953e1cb225fa45c7a47b
-commit 9444d82678cb7781820da4d1c23b3c2b9fb1e12f
-Author: Damien Miller <djm at mindrot.org>
-Date: Fri Apr 5 11:21:48 2019 -0700
+commit a546b17bbaeb12beac4c9aeed56f74a42b18a93a
+Author: djm at openbsd.org <djm at openbsd.org>
+Date: Wed Oct 9 00:02:57 2019 +0000
- rewrite README
+ upstream: fix integer overflow in XMSS private key parsing.
- Include basic build instructions and comments on commonly-used build-
- time flags, links to the manual pages and other resources.
+ Reported by Adam Zabrocki via SecuriTeam's SSH program.
- Now in Markdown format for better viewing on github, etc.
+ Note that this code is experimental and not compiled by default.
+
+ ok markus@
+
+ OpenBSD-Commit-ID: cd0361896d15e8a1bac495ac583ff065ffca2be1
-commit a924de0c4908902433813ba205bee1446bd1a157
-Author: Damien Miller <djm at mindrot.org>
-Date: Fri Apr 5 03:41:52 2019 +1100
+commit c2cc25480ba36ab48c1a577bebb12493865aad87
+Author: dtucker at openbsd.org <dtucker at openbsd.org>
+Date: Tue Oct 8 22:40:39 2019 +0000
- update versions
+ upstream: Correct type for end-of-list sentinel; fixes initializer
+
+ warnings on some platforms. ok deraadt.
+
+ OpenBSD-Commit-ID: a990dbc2dac25bdfa07e79321349c73fd991efa2
-commit 312dcee739bca5d6878c536537b2a8a497314b75
+commit e827aedf8818e75c0016b47ed8fc231427457c43
Author: djm at openbsd.org <djm at openbsd.org>
-Date: Wed Apr 3 15:48:45 2019 +0000
+Date: Mon Oct 7 23:10:38 2019 +0000
- upstream: openssh-8.0
+ upstream: reversed test yielded incorrect debug message
- OpenBSD-Commit-ID: 5aafdf218679dab982fea20771afd643be9a127b
+ OpenBSD-Commit-ID: 78bb512d04cfc238adb2c5b7504ac93eecf523b3
-commit 885bc114692046d55e2a170b932bdc0092fa3456
+commit 8ca491d29fbe26e5909ce22b344c0a848dc28d55
Author: Damien Miller <djm at mindrot.org>
-Date: Thu Apr 4 02:47:40 2019 +1100
+Date: Tue Oct 8 17:05:57 2019 +1100
- session: Do not use removed API
+ depend
+
+commit 86a0323374cbd404629e75bb320b3fa1c16aaa6b
+Author: Darren Tucker <dtucker at dtucker.net>
+Date: Wed Oct 9 09:36:06 2019 +1100
+
+ Make MAKE_CLONE no-op macro more correct.
- from Jakub Jelen
+ Similar to the previous change to DEF_WEAK, some compilers don't like
+ the empty statement, so convert into a no-op function prototype.
-commit 9d7b2882b0c9a5e9bf8312ce4075bf178e2b98be
-Author: djm at openbsd.org <djm at openbsd.org>
-Date: Fri Mar 29 11:31:40 2019 +0000
+commit cfc1897a2002ec6c4dc879b24e8b3153c87ea2cf
+Author: Damien Miller <djm at mindrot.org>
+Date: Wed Oct 9 09:06:35 2019 +1100
- upstream: when logging/fataling on error, include a bit more detail
+ wrap stdint.h include in HAVE_STDINT_H
- than just the function name and the error message
+ make the indenting a little more consistent too..
- OpenBSD-Commit-ID: dd72d7eba2215fcb89be516c378f633ea5bcca9f
+ Fixes Solaris 2.6; reported by Tom G. Christensen
-commit 79a87d32783d6c9db40af8f35e091d9d30365ae7
-Author: Darren Tucker <dtucker at dtucker.net>
-Date: Wed Apr 3 06:27:45 2019 +1100
+commit 13b3369830a43b89a503915216a23816d1b25744
+Author: Damien Miller <djm at mindrot.org>
+Date: Tue Oct 8 15:32:02 2019 +1100
- Remove "struct ssh" from sys_auth_record_login.
+ avoid "return (value)" in void-declared function
- It's not needed, and is not available from the call site in loginrec.c
- Should only affect AIX, spotted by Kevin Brott.
+ spotted by Tim Rice; ok dtucker
-commit 138c0d52cdc90f9895333b82fc57d81cce7a3d90
+commit 0c7f8d2326d812b371f7afd63aff846973ec80a4
Author: Darren Tucker <dtucker at dtucker.net>
-Date: Tue Apr 2 18:21:35 2019 +1100
+Date: Tue Oct 8 14:44:50 2019 +1100
- Adapt custom_failed_login to new prototype.
+ Make DEF_WEAK more likely to be correct.
- Spotted by Kevin Brott.
+ Completely nop-ing out DEF_WEAK leaves an empty statemment which some
+ compilers don't like. Replace with a no-op function template. ok djm@
-commit a0ca4009ab2f0b1007ec8ab6864dbf9b760a8ed5
-Author: Darren Tucker <dtucker at dtucker.net>
-Date: Mon Apr 1 20:07:23 2019 +1100
+commit b1e79ea8fae9c252399677a28707661d85c7d00c
+Author: dtucker at openbsd.org <dtucker at openbsd.org>
+Date: Sun Oct 6 11:49:50 2019 +0000
- Add includes.h for compat layer.
+ upstream: Instead of running sed over the whole log to remove CRs,
- Should fix build on AIX 7.2.
+ remove them only where it's needed (and confuses test(1) on at least OS X in
+ portable).
+
+ OpenBSD-Regress-ID: a6ab9b4bd1d33770feaf01b2dfb96f9e4189d2d0
-commit 00991151786ce9b1d577bdad1f83a81d19c8236d
-Author: Tim Rice <tim at multitalents.net>
-Date: Sun Mar 31 22:14:22 2019 -0700
+commit 8dc7d6b75a7f746fdd056acd41dffc0a13557a4c
+Author: Eduardo Barretto <ebarretto at linux.vnet.ibm.com>
+Date: Tue May 9 13:33:30 2017 -0300
- Stop USL compilers for erroring with "integral constant expression expected"
+ Enable specific ioctl call for EP11 crypto card (s390)
+
+ The EP11 crypto card needs to make an ioctl call, which receives an
+ specific argument. This crypto card is for s390 only.
+
+ Signed-off-by: Eduardo Barretto <ebarretto at linux.vnet.ibm.com>
-commit 43f47ebbdd4037b569c23b8f4f7981f53b567f1d
-Author: Tim Rice <tim at multitalents.net>
-Date: Sun Mar 31 19:22:19 2019 -0700
+commit 07f2c7f34951c04d2cd796ac6c80e47c56c4969e
+Author: djm at openbsd.org <djm at openbsd.org>
+Date: Fri Oct 4 04:31:59 2019 +0000
- Only use O_NOFOLLOW in fchownat and fchmodat if defined
+ upstream: fix memory leak in error path; bz#3074 patch from
+
+ krishnaiah.bommu at intel.com, ok dtucker
+
+ OpenBSD-Commit-ID: d031853f3ecf47b35a0669588f4d9d8e3b307b3c
-commit 342d6e51589b184c337cccfc4c788b60ff8b3765
-Author: Jakub Jelen <jjelen at redhat.com>
-Date: Fri Mar 29 12:29:41 2019 +0100
+commit b7fbc75e119170f4d15c94a7fda4a1050e0871d6
+Author: djm at openbsd.org <djm at openbsd.org>
+Date: Fri Oct 4 04:13:39 2019 +0000
- Adjust softhsm2 path on Fedora Linux for regress
+ upstream: space
- The SoftHSM lives in Fedora in /usr/lib64/pkcs11/libsofthsm2.so
+ OpenBSD-Commit-ID: 350648bcf00a2454e7ef998b7d88e42552b348ac
-commit f5abb05f8c7358dacdcb866fe2813f6d8efd5830
-Author: Darren Tucker <dtucker at dtucker.net>
-Date: Thu Mar 28 09:26:14 2019 +1100
+commit 643ab68c79ac1644f4a31e36928c2bfc8a51db3c
+Author: djm at openbsd.org <djm at openbsd.org>
+Date: Fri Oct 4 03:39:19 2019 +0000
- Only use O_NOFOLLOW in utimensat if defined.
+ upstream: more sshsig regress tests: check key revocation, the
- Fixes build on systems that don't have it (Solaris <=9) Found by
- Tom G. Christensen.
+ check-novalidate signature test mode and signing keys in ssh-agent.
+
+ From Sebastian Kinne (slightly tweaked)
+
+ OpenBSD-Regress-ID: b39566f5cec70140674658cdcedf38752a52e2e2
-commit 786cd4c1837fdc3fe7b4befe54a3f37db7df8715
-Author: Corinna Vinschen <vinschen at redhat.com>
-Date: Wed Mar 27 18:18:21 2019 +0100
+commit 714031a10bbe378a395a93cf1040f4ee1451f45f
+Author: dtucker at openbsd.org <dtucker at openbsd.org>
+Date: Fri Oct 4 03:26:58 2019 +0000
- drop old Cygwin considerations
+ upstream: Check for gmtime failure in moduli generation. Based on
- - Cygwin supports non-DOS characters in filenames
- - Cygwin does not support Windows XP anymore
+ patch from krishnaiah.bommu at intel.com, ok djm@
- Signed-off-by: Corinna Vinschen <vinschen at redhat.com>
+ OpenBSD-Commit-ID: 4c6a4cde0022188ac83737de08da0e875704eeaa
-commit 21da87f439b48a85b951ef1518fe85ac0273e719
-Author: djm at openbsd.org <djm at openbsd.org>
-Date: Wed Mar 27 09:29:14 2019 +0000
+commit 6918974405cc28ed977f802fd97a9c9a9b2e141b
+Author: jmc at openbsd.org <jmc at openbsd.org>
+Date: Thu Oct 3 17:07:50 2019 +0000
- upstream: fix interaction between ClientAliveInterval and RekeyLimit
+ upstream: use a more common options order in SYNOPSIS and sync
- that could cause connection to close incorrectly; Report and patch from Jakub
- Jelen in bz#2757; ok dtucker@ markus@
+ usage(); while here, no need for Bk/Ek;
- OpenBSD-Commit-ID: 17229a8a65bd8e6c2080318ec2b7a61e1aede3fb
+ ok dtucker
+
+ OpenBSD-Commit-ID: 38715c3f10b166f599a2283eb7bc14860211bb90
-commit 4f0019a9afdb4a94d83b75e82dbbbe0cbe826c56
+commit feff96b7d4c0b99307f0459cbff128aede4a8984
Author: djm at openbsd.org <djm at openbsd.org>
-Date: Mon Mar 25 22:34:52 2019 +0000
+Date: Wed Oct 2 09:50:50 2019 +0000
- upstream: Fix authentication failures when "AuthenticationMethods
+ upstream: thinko in previous; spotted by Mantas
- any" in a Match block overrides a more restrictive global default.
+ =?UTF-8?q?=20Mikul=C4=97nas?=
+ MIME-Version: 1.0
+ Content-Type: text/plain; charset=UTF-8
+ Content-Transfer-Encoding: 8bit
- Spotted by jmc@, ok markus@
+ OpenBSD-Commit-ID: ffa3f5a45e09752fc47d9041e2203ee2ec15b24d
+
+commit b5a89eec410967d6b712665f8cf0cb632928d74b
+Author: djm at openbsd.org <djm at openbsd.org>
+Date: Wed Oct 2 08:07:13 2019 +0000
+
+ upstream: make signature format match PROTOCO
- OpenBSD-Commit-ID: a90a4fe2ab81d0eeeb8fdfc21af81f7eabda6666
+ =?UTF-8?q?=20as=20a=20string,=20not=20raw=20bytes.=20Spotted=20by=20Manta?=
+ =?UTF-8?q?s=20Mikul=C4=97nas?=
+ MIME-Version: 1.0
+ Content-Type: text/plain; charset=UTF-8
+ Content-Transfer-Encoding: 8bit
+
+ OpenBSD-Commit-ID: 80fcc6d52893f80c6de2bedd65353cebfebcfa8f
-commit d6e5def308610f194c0ec3ef97a34a3e9630e190
+commit dc6f81ee94995deb11bbf7e19801022c5f6fd90a
Author: djm at openbsd.org <djm at openbsd.org>
-Date: Mon Mar 25 22:33:44 2019 +0000
+Date: Wed Oct 2 08:05:50 2019 +0000
- upstream: whitespace
+ upstream: ban empty namespace strings for s
- OpenBSD-Commit-ID: 106e853ae8a477e8385bc53824d3884a8159db07
+ =?UTF-8?q?shsig;=20spotted=20by=20Mantas=20Mikul=C4=97nas?=
+ MIME-Version: 1.0
+ Content-Type: text/plain; charset=UTF-8
+ Content-Transfer-Encoding: 8bit
+
+ OpenBSD-Commit-ID: 7c5bcf40bed8f4e826230176f4aa353c52aeb698
-commit 26e0cef07b04479537c971dec898741df1290fe5
-Author: dtucker at openbsd.org <dtucker at openbsd.org>
-Date: Mon Mar 25 16:19:44 2019 +0000
+commit fa5bd8107e0e2b3e1e184f55d0f9320c119f65f0
+Author: Darren Tucker <dtucker at dtucker.net>
+Date: Wed Oct 2 14:30:55 2019 +1000
- upstream: Expand comment to document rationale for default key
+ Put ssherr.h back as it's actually needed.
+
+commit 3ef92a657444f172b61f92d5da66d94fa8265602
+Author: Lonnie Abelbeck <lonnie at abelbeck.com>
+Date: Tue Oct 1 09:05:09 2019 -0500
+
+ Deny (non-fatal) shmget/shmat/shmdt in preauth privsep child.
- sizes. "seems worthwhile" deraadt.
+ New wait_random_seeded() function on OpenSSL 1.1.1d uses shmget, shmat, and shmdt
+ in the preauth codepath, deny (non-fatal) in seccomp_filter sandbox.
+
+commit edd1d3a6261aecbf9a55944fd7be1db83571b46e
+Author: Damien Miller <djm at mindrot.org>
+Date: Wed Oct 2 10:54:28 2019 +1000
+
+ remove duplicate #includes
- OpenBSD-Commit-ID: 72e5c0983d7da1fb72f191870f36cb58263a2456
+ Prompted by Jakub Jelen
-commit f47269ea67eb4ff87454bf0d2a03e55532786482
-Author: dtucker at openbsd.org <dtucker at openbsd.org>
-Date: Mon Mar 25 15:49:00 2019 +0000
+commit 13c508dfed9f25e6e54c984ad00a74ef08539e70
+Author: Damien Miller <djm at mindrot.org>
+Date: Wed Oct 2 10:51:15 2019 +1000
- upstream: Increase the default RSA key size to 3072 bits. Based on
+ typo in comment
+
+commit d0c3ac427f6c52b872d6617421421dd791664445
+Author: djm at openbsd.org <djm at openbsd.org>
+Date: Wed Oct 2 00:42:30 2019 +0000
+
+ upstream: remove some duplicate #includes
- the estimates from NIST Special Publication 800-57, 3k bits provides security
- equivalent to 128 bits which is the smallest symmetric cipher we enable by
- default. ok markus@ deraadt@
+ OpenBSD-Commit-ID: ed6827ab921eff8027669848ef4f70dc1da4098c
+
+commit 084682786d9275552ee93857cb36e43c446ce92c
+Author: djm at openbsd.org <djm at openbsd.org>
+Date: Tue Oct 1 10:22:53 2019 +0000
+
+ upstream: revert unconditional forced login implemented in r1.41 of
- OpenBSD-Commit-ID: 461dd32ebe808f88f4fc3ec74749b0e6bef2276b
+ ssh-pkcs11.c; r1.45 added a forced login as a fallback for cases where the
+ token returns no objects and this is less disruptive for users of tokens
+ directly in ssh (rather than via ssh-agent) and in ssh-keygen
+
+ bz3006, patch from Jakub Jelen; ok markus
+
+ OpenBSD-Commit-ID: 33d6df589b072094384631ff93b1030103b3d02e
-commit 62949c5b37af28d8490d94866e314a76be683a5e
+commit 6c91d42cce3f055917dc3fd2c305dfc5b3b584b3
Author: jmc at openbsd.org <jmc at openbsd.org>
-Date: Fri Mar 22 20:58:34 2019 +0000
+Date: Sun Sep 29 16:31:57 2019 +0000
- upstream: full stop in the wrong place;
+ upstream: group and sort single letter options; ok deraadt
- OpenBSD-Commit-ID: 478a0567c83553a2aebf95d0f1bd67ac1b1253e4
+ OpenBSD-Commit-ID: e1480e760a2b582f79696cdcff70098e23fc603f
-commit 1b1332b5bb975d759a50b37f0e8bc8cfb07a0bb0
+commit 3b44bf39ff4d7ef5d50861e2e9dda62d2926d2fe
Author: jmc at openbsd.org <jmc at openbsd.org>
-Date: Sat Mar 16 19:14:21 2019 +0000
+Date: Fri Sep 27 20:03:24 2019 +0000
- upstream: benno helped me clean up the tcp forwarding section;
+ upstream: fix the DH-GEX text in -a; because this required a comma,
- OpenBSD-Commit-ID: d4bec27edefde636fb632b7f0b7c656b9c7b7f08
+ i added a comma to the first part, for balance...
+
+ OpenBSD-Commit-ID: 2c3464e9e82a41e8cdfe8f0a16d94266e43dbb58
-commit 2aee9a49f668092ac5c9d34e904ef7a9722e541d
-Author: markus at openbsd.org <markus at openbsd.org>
-Date: Fri Mar 8 17:24:43 2019 +0000
+commit 3e53ef28fab53094e3b19622ba0e9c3d5fe71273
+Author: deraadt at openbsd.org <deraadt at openbsd.org>
+Date: Tue Sep 24 12:50:46 2019 +0000
- upstream: fix use-after-free in ssh-pkcs11; found by hshoexer w/AFL
+ upstream: identity_file[] should be PATH_MAX, not the arbitrary
- OpenBSD-Commit-ID: febce81cca72b71f70513fbee4ff52ca050f675c
+ number 1024
+
+ OpenBSD-Commit-ID: e775f94ad47ce9ab37bd1410d7cf3b7ea98b11b7
-commit 9edbd7821e6837e98e7e95546cede804dac96754
-Author: Darren Tucker <dtucker at dtucker.net>
-Date: Thu Mar 14 10:17:28 2019 +1100
+commit 90d4b2541e8c907793233d9cbd4963f7624f4174
+Author: jmc at openbsd.org <jmc at openbsd.org>
+Date: Fri Sep 20 18:50:58 2019 +0000
- Fix build when configured --without-openssl.
+ upstream: new sentence, new line;
- ok djm@
+ OpenBSD-Commit-ID: c35ca5ec07be460e95e7406af12eee04a77b6698
-commit 825ab32f0d04a791e9d19d743c61ff8ed9b4d8e5
+commit fbec7dba01b70b49ac47f56031310865dff86200
Author: Darren Tucker <dtucker at dtucker.net>
-Date: Thu Mar 14 08:51:17 2019 +1100
+Date: Mon Sep 30 18:01:12 2019 +1000
- On Cygwin run sshd as SYSTEM where possible.
+ Include stdio.h for snprintf.
- Seteuid now creates user token using S4U. We don't create a token
- from scratch anymore, so we don't need the "Create a process token"
- privilege. The service can run under SYSTEM again...
+ Patch from vapier at gentoo.org.
+
+commit 0a403bfde71c4b82147473298d3a60b4171468bd
+Author: Darren Tucker <dtucker at dtucker.net>
+Date: Mon Sep 30 14:11:42 2019 +1000
+
+ Add SKIP_LTESTS for skipping specific tests.
+
+commit 4d59f7a5169c451ebf559aedec031ac9da2bf80c
+Author: dtucker at openbsd.org <dtucker at openbsd.org>
+Date: Fri Sep 27 05:25:12 2019 +0000
+
+ upstream: Test for empty result in expected bits. Remove CRs from log
- ...unless Cygwin is running on Windows Vista or Windows 7 in the
- WOW64 32 bit emulation layer. It turns out that WOW64 on these systems
- didn't implement MsV1_0 S4U Logon so we still need the fallback
- to NtCreateToken for these systems.
+ as they confuse tools on some platforms. Re-enable the 3des-cbc test.
- Signed-off-by: Corinna Vinschen <vinschen at redhat.com>
+ OpenBSD-Regress-ID: edf536d4f29fc1ba412889b37247a47f1b49d250
-commit a212107bfdf4d3e870ab7a443e4d906e5b9578c3
+commit 7c817d129e2d48fc8a6f7965339313023ec45765
Author: Darren Tucker <dtucker at dtucker.net>
-Date: Wed Mar 13 10:49:16 2019 +1100
+Date: Fri Sep 27 15:26:22 2019 +1000
- Replace alloca with xcalloc.
+ Re-enable dhgex test.
- The latter checks for memory exhaustion and integer overflow and may be
- at a less predictable place. Sanity check by vinschen at redhat.com, ok
- djm@
+ Since we've added larger fallback groups to dh.c this test will pass
+ even if there is no moduli file installed on the system.
-commit daa7505aadca68ba1a2c70cbdfce423208eb91ee
+commit c1e0a32fa852de6d1c82ece4f76add0ab0ca0eae
Author: Darren Tucker <dtucker at dtucker.net>
-Date: Tue Mar 12 09:19:19 2019 +1100
+Date: Tue Sep 24 21:17:20 2019 +1000
- Use Cygwin-specific matching only for users+groups.
-
- Patch from vinschen at redhat.com, updated a little by me.
+ Add more ToS bits, currently only used by netcat.
-commit fd10cf027b56f9aaa80c9e3844626a05066589a4
-Author: dtucker at openbsd.org <dtucker at openbsd.org>
-Date: Wed Mar 6 22:14:23 2019 +0000
+commit 5a273a33ca1410351cb484af7db7c13e8b4e8e4e
+Author: Darren Tucker <dtucker at dtucker.net>
+Date: Thu Sep 19 15:41:23 2019 +1000
- upstream: Move checks for lists of users or groups into their own
+ Privsep is now required.
+
+commit 8aa2aa3cd4d27d14e74b247c773696349472ef20
+Author: djm at openbsd.org <djm at openbsd.org>
+Date: Mon Sep 16 03:23:02 2019 +0000
+
+ upstream: Allow testing signature syntax and validity without verifying
- function. This is a no-op on OpenBSD but will make things easier in
- -portable, eg on systems where these checks should be case-insensitive. ok
- djm@
+ that a signature came from a trusted signer. To discourage accidental or
+ unintentional use, this is invoked by the deliberately ugly option name
+ "check-novalidate"
- OpenBSD-Commit-ID: 8bc9c8d98670e23f8eaaaefe29c1f98e7ba0487e
+ from Sebastian Kinne
+
+ OpenBSD-Commit-ID: cea42c36ab7d6b70890e2d8635c1b5b943adcc0b
-commit ab5fee8eb6a011002fd9e32b1597f02aa8804a25
-Author: dtucker at openbsd.org <dtucker at openbsd.org>
-Date: Wed Mar 6 21:06:59 2019 +0000
+commit 7047d5afe3103f0f07966c05b810682d92add359
+Author: djm at openbsd.org <djm at openbsd.org>
+Date: Fri Sep 13 04:52:34 2019 +0000
- upstream: Reset last-seen time when sending a keepalive. Prevents
+ upstream: clarify that IdentitiesOnly also applies to the default
- sending two keepalives successively and prematurely terminating connection
- when ClientAliveCount=1. While there, collapse two similar tests into one.
- ok markus@
+ ~/.ssh/id_* keys; bz#3062
- OpenBSD-Commit-ID: 043670d201dfe222537a2a4bed16ce1087de5ddd
+ OpenBSD-Commit-ID: 604be570e04646f0f4a17026f8b2aada6a585dfa
-commit c13b74530f9f1d9df7aeae012004b31b2de4438e
-Author: naddy at openbsd.org <naddy at openbsd.org>
-Date: Tue Mar 5 16:17:12 2019 +0000
+commit b36ee3fcb2f1601693b1b7fd60dd6bd96006ea75
+Author: dtucker at openbsd.org <dtucker at openbsd.org>
+Date: Fri Sep 13 04:36:43 2019 +0000
- upstream: PKCS#11 support is no longer limited to RSA; ok benno@
+ upstream: Plug mem leaks on error paths, based in part on github
- kn@
+ pr#120 from David Carlier. ok djm at .
- OpenBSD-Commit-ID: 1a9bec64d530aed5f434a960e7515a3e80cbc826
+ OpenBSD-Commit-ID: c57adeb1022a8148fc86e5a88837b3b156dbdb7e
-commit e9552d6043db7cd170ac6ba1b4d2c7a5eb2c3201
+commit 2aefdf1aef906cf7548a2e5927d35aacb55948d4
Author: djm at openbsd.org <djm at openbsd.org>
-Date: Fri Mar 1 03:29:32 2019 +0000
+Date: Fri Sep 13 04:31:19 2019 +0000
- upstream: in ssh_set_newkeys(), mention the direction that we're
-
- keying in debug messages. Previously it would be difficult to tell which
- direction it was talking about
+ upstream: whitespace
- OpenBSD-Commit-ID: c2b71bfcceb2a7389b9d0b497fb2122a406a522d
+ OpenBSD-Commit-ID: 57a71dd5f4cae8d61e0ac631a862589fb2bfd700
-commit 76a24b3fa193a9ca3e47a8779d497cb06500798b
+commit fbe24b142915331ceb2a3a76be3dc5b6d204fddf
Author: djm at openbsd.org <djm at openbsd.org>
-Date: Fri Mar 1 02:32:39 2019 +0000
+Date: Fri Sep 13 04:27:35 2019 +0000
- upstream: Fix two race conditions in sshd relating to SIGHUP:
-
- 1. Recently-forked child processes will briefly remain listening to
- listen_socks. If the main server sshd process completes its restart
- via execv() before these sockets are closed by the child processes
- then it can fail to listen at the desired addresses/ports and/or
- fail to restart.
-
- 2. When a SIGHUP is received, there may be forked child processes that
- are awaiting their reexecution state. If the main server sshd
- process restarts before passing this state, these child processes
- will yield errors and use a fallback path of reading the current
- sshd_config from the filesystem rather than use the one that sshd
- was started with.
-
- To fix both of these cases, we reuse the startup_pipes that are shared
- between the main server sshd and forked children. Previously this was
- used solely to implement tracking of pre-auth child processes for
- MaxStartups, but this extends the messaging over these pipes to include
- a child->parent message that the parent process is safe to restart. This
- message is sent from the child after it has completed its preliminaries:
- closing listen_socks and receiving its reexec state.
+ upstream: allow %n to be expanded in ProxyCommand strings
- bz#2953, reported by Michal Koutný; ok markus@ dtucker@
+ From Zachary Harmany via github.com/openssh/openssh-portable/pull/118
+ ok dtucker@
- OpenBSD-Commit-ID: 7df09eacfa3ce13e9a7b1e9f17276ecc924d65ab
+ OpenBSD-Commit-ID: 7eebf1b7695f50c66d42053d352a4db9e8fb84b6
-commit de817e9dfab99473017d28cdf69e60397d00ea21
+commit 2ce1d11600e13bee0667d6b717ffcc18a057b821
Author: djm at openbsd.org <djm at openbsd.org>
-Date: Fri Mar 1 02:16:47 2019 +0000
+Date: Fri Sep 13 04:07:42 2019 +0000
- upstream: mention PKCS11Provide=none, reword a little and remove
+ upstream: clarify that ConnectTimeout applies both to the TCP
- mention of RSA keys only (since we support ECDSA now and might support others
- in the future). Inspired by Jakub Jelen via bz#2974
+ connection and to the protocol handshake/KEX. From Jean-Charles Longuet via
+ Github PR140
- OpenBSD-Commit-ID: a92e3686561bf624ccc64ab320c96c9e9a263aa5
+ OpenBSD-Commit-ID: ce1766abc6da080f0d88c09c2c5585a32b2256bf
-commit 95a8058c1a90a27acbb91392ba206854abc85226
-Author: djm at openbsd.org <djm at openbsd.org>
-Date: Fri Mar 1 02:08:50 2019 +0000
+commit df780114278f406ef7cb2278802a2660092fff09
+Author: dtucker at openbsd.org <dtucker at openbsd.org>
+Date: Mon Sep 9 02:31:19 2019 +0000
- upstream: let PKCS11Provider=none do what users expect
-
*** 33704 LINES SKIPPED ***
More information about the dev-commits-src-all
mailing list