Viktor Szakats 0a17ea04dc packet: fix memleak on receiving multiple exit-signal packets ...

Reported-by: afldl on github
Fixes GHSA-53q9-wmqr-fh7c
Follow-up to 6140ec2de3

Closes #2504

2026-08-03 20:41:43 +02:00

..

.gitignore

REUSE: add copyright headers to more files, and .gitignore updates

2025-10-13 13:35:25 +02:00

agent.c

tidy-up: C nits

2026-07-28 03:20:30 +02:00

agent.h

agent: fix unused macro compiler warnings in UWP non-unity builds

2026-07-15 21:02:15 +02:00

bcrypt_pbkdf.c

src: add one-shot hash function ssh2_hash() and use it

2026-07-06 16:05:18 +02:00

blowfish.c

tidy-up: comment typos, parentheses, formatting

2026-07-17 02:35:06 +02:00

chacha.c

tidy-up: miscellaneous

2026-06-30 00:12:47 +02:00

chacha.h

tidy-up: comments

2026-06-21 23:15:10 +02:00

channel.c

src: de-duplicate inttypes.h and sys/uio.h includes, inline comment

2026-08-01 12:06:14 +02:00

channel.h

tidy-up: fixup and reflow copyright headers

2026-07-08 04:22:55 +02:00

cipher-chachapoly.c

src: add static to const strings and tables, where missing

2026-07-23 12:10:42 +02:00

cipher-chachapoly.h

tidy-up: miscellaneous

2026-06-05 18:12:37 +02:00

CMakeLists.txt

build: drop CLEAR_MEMORY=NO and --disable-clear-memory options

2026-07-30 17:36:20 +02:00

comp.c

tidy-up: fixup and reflow copyright headers

2026-07-08 04:22:55 +02:00

comp.h

tidy-up: fixup and reflow copyright headers

2026-07-08 04:22:55 +02:00

crypt.c

src: add support for chacha20-poly130-encrypted OpenSSH key files

2026-08-03 05:23:50 +02:00

crypto_config.h

src: disable SHA1-based hostkey methods and signatures by default, fix fallouts

2026-08-03 16:44:03 +02:00

crypto.h

src: disable SHA1-based hostkey methods and signatures by default, fix fallouts

2026-08-03 16:44:03 +02:00

global.c

tidy-up: fixup and reflow copyright headers

2026-07-08 04:22:55 +02:00

HACKING-CRYPTO.md

tidy-up: rename some args for consistency

2026-07-22 20:46:31 +02:00

hostkey.c

src: disable SHA1-based hostkey methods and signatures by default, fix fallouts

2026-08-03 16:44:03 +02:00

keepalive.c

src: use abstract internal time type, bump resolution to milliseconds

2026-07-19 02:56:04 +02:00

kex.c

src: add support for chacha20-poly130-encrypted OpenSSH key files

2026-08-03 05:23:50 +02:00

knownhost.c

tidy-up: C and formatting nits

2026-07-31 22:36:45 +02:00

libgcrypt.c

crypto: constify ssh2_dh_validate() args

2026-07-27 14:15:55 +02:00

libgcrypt.h

crypto: de-duplicate ssh2_bn_ctx* macro stubs into crypto.h

2026-07-10 18:32:58 +02:00

libssh2_config_cmake.h.in

build: assume POSIX gettimeofday() in fallback codepath, stop detecting it

2026-08-03 03:54:47 +02:00

libssh2_priv.h

src: add support for chacha20-poly130-encrypted OpenSSH key files

2026-08-03 05:23:50 +02:00

libssh2_setup.h

build: assume POSIX gettimeofday() in fallback codepath, stop detecting it

2026-08-03 03:54:47 +02:00

libssh2.rc

drop www. from www.libssh2.org

2023-08-18 11:20:58 +00:00

mac.c

mac: disable SHA1-based MACs by default

2026-07-29 02:53:01 +02:00

mac.h

tidy-up: fixup and reflow copyright headers

2026-07-08 04:22:55 +02:00

Makefile.am

HACKING-CRYPTO: move from docs to src, markdownify, update

2026-07-10 16:23:00 +02:00

Makefile.inc

agent: list supported backends in libssh2_build_options()

2026-07-14 18:29:12 +02:00

mbedtls.c

src: disable SHA1-based hostkey methods and signatures by default, fix fallouts

2026-08-03 16:44:03 +02:00

mbedtls.h

tidy-up: misc typos, syntax nits, formatting

2026-07-14 00:58:30 +02:00

misc.c

misc: fall back to POSIX gettimeofday() unconditionally on non-Windows

2026-08-03 03:31:23 +02:00

misc.h

misc: drop ssh2_gettimeofday(), no longer used

2026-08-03 03:31:23 +02:00

openssl.c

openssl: fix compiler warning with AWS-LC/BoringSSL with debug logging enabled

2026-08-03 20:11:49 +02:00

openssl.h

crypto: de-duplicate/merge most file/blob codepaths

2026-07-21 19:34:19 +02:00

os400qc3.c

src: disable SHA1-based hostkey methods and signatures by default, fix fallouts

2026-08-03 16:44:03 +02:00

os400qc3.h

src: disable SHA1-based hostkey methods and signatures by default, fix fallouts

2026-08-03 16:44:03 +02:00

packet.c

packet: fix memleak on receiving multiple exit-signal packets

2026-08-03 20:41:43 +02:00

packet.h

packet: make ssh2_packet_askv() static

2026-07-24 00:38:57 +02:00

pem.c

src: add support for chacha20-poly130-encrypted OpenSSH key files

2026-08-03 05:23:50 +02:00

poly1305.c

src: formatting (cont.)

2026-05-13 12:00:36 +02:00

poly1305.h

build: improve building in ISO and C89 modes, test in CI

2026-04-08 15:30:16 +02:00

publickey.c

tidy-up: C nits

2026-07-28 03:20:30 +02:00

scp.c

src: replace banned strto*() number parsing with local function

2026-07-31 21:23:06 +02:00

session.c

src: bump ssh2_time_t/ssh2_timediff_t resolution from milliseconds to microseconds

2026-08-03 02:03:56 +02:00

session.h

src: use abstract internal time type, bump resolution to milliseconds

2026-07-19 02:56:04 +02:00

sftp.c

tidy-up: C and formatting nits

2026-07-31 22:36:45 +02:00

sftp.h

src: use abstract internal time type, bump resolution to milliseconds

2026-07-19 02:56:04 +02:00

transport.c

transport: avoid CRYPT_FLAG_*() doing symbol concatenation

2026-08-03 04:20:35 +02:00

transport.h

tidy-up: fixup and reflow copyright headers

2026-07-08 04:22:55 +02:00

userauth_kbd_packet.c

tidy-up: C nits

2026-07-28 03:20:30 +02:00

userauth_kbd_packet.h

libgcrypt, mbedtls, openssl: validate DH public value

2026-07-08 22:23:01 +02:00

userauth.c

userauth: enable ssh-rsa-cert-v01@openssh.com for all backends in userauth_supported_key_sign_algs(), fix tests

2026-08-02 18:46:37 +02:00

userauth.h

src: drop method length

2026-07-22 01:40:19 +02:00

version.c

build: drop CLEAR_MEMORY=NO and --disable-clear-memory options

2026-07-30 17:36:20 +02:00

wincng.c

src: disable SHA1-based hostkey methods and signatures by default, fix fallouts

2026-08-03 16:44:03 +02:00

wincng.h

crypto: de-duplicate ssh2_bn_ctx* macro stubs into crypto.h

2026-07-10 18:32:58 +02:00