1
I Use This!
Activity Not Available

Commits : Listings

Analyzed about 1 year ago. based on code collected about 1 year ago.
Jan 19, 2023 — Jan 19, 2024
Commit Message Contributor Files Modified Lines Added Lines Removed Code Location Date
SSH2 connections weren't closing cleanly after socket revamp. Fixed. More... over 24 years ago
SSH2 connections weren't closing cleanly after socket revamp. Fixed. More... over 24 years ago
Window resizing wasn't working in SSH2 More... over 24 years ago
Window resizing wasn't working in SSH2 More... over 24 years ago
Make the frankly ridiculous prototypes for modpow() and modmul() more sane More... over 24 years ago
Make the frankly ridiculous prototypes for modpow() and modmul() more sane More... over 24 years ago
Update DSS implementation to use new bignum routines More... over 24 years ago
Update DSS implementation to use new bignum routines More... over 24 years ago
Improved entropy gathering. More... over 24 years ago
Improved entropy gathering. More... over 24 years ago
Fix a bug which was causing occasional failed-host-key-check messages. Also left some diagnostics in, under #if 0, so that next time this happens it'll be easier to debug. More... over 24 years ago
Fix a bug which was causing occasional failed-host-key-check messages. Also left some diagnostics in, under #if 0, so that next time this happens it'll be easier to debug. More... over 24 years ago
Oops. A field like `sending_oob' in the Socket structure really deserves to be initialised to something sane at creation time. More... over 24 years ago
Oops. A field like `sending_oob' in the Socket structure really deserves to be initialised to something sane at creation time. More... over 24 years ago
Plink and PSCP were failing to load the `Default Settings' options when connecting to an arbitrary hostname. In particular, setting a default user name didn't work. Now it does. More... over 24 years ago
Plink and PSCP were failing to load the `Default Settings' options when connecting to an arbitrary hostname. In particular, setting a default user name didn't work. Now it does. More... over 24 years ago
Remove the NO_SECURITY define I accidentally copied from Pageant More... over 24 years ago
Remove the NO_SECURITY define I accidentally copied from Pageant More... over 24 years ago
Created a shiny new abstraction for the socket handling. Has many advantages: - protocol modules can call sk_write() without having to worry about writes blocking, because blocking writes are handled in the abstraction layer and retried later. - `Lost connection while sending' is a thing of the past. - <winsock.h> is no longer needed in most modules, because "putty.h" doesn't have to declare `SOCKET' variables any more, only the abstracted `Socket' type. - select()-equivalent between multiple sockets will now be handled sensibly, which opens the way for things like SSH port forwarding. More... over 24 years ago
Created a shiny new abstraction for the socket handling. Has many advantages: - protocol modules can call sk_write() without having to worry about writes blocking, because blocking writes are handled in the abstraction layer and retried later. - `Lost connection while sending' is a thing of the past. - <winsock.h> is no longer needed in most modules, because "putty.h" doesn't have to declare `SOCKET' variables any more, only the abstracted `Socket' type. - select()-equivalent between multiple sockets will now be handled sensibly, which opens the way for things like SSH port forwarding. More... over 24 years ago
Created a shiny new abstraction for the socket handling. Has many advantages: - protocol modules can call sk_write() without having to worry about writes blocking, because blocking writes are handled in the abstraction layer and retried later. - `Lost connection while sending' is a thing of the past. - <winsock.h> is no longer needed in most modules, because "putty.h" doesn't have to declare `SOCKET' variables any more, only the abstracted `Socket' type. - select()-equivalent between multiple sockets will now be handled sensibly, which opens the way for things like SSH port forwarding. More... over 24 years ago
Created a shiny new abstraction for the socket handling. Has many advantages: - protocol modules can call sk_write() without having to worry about writes blocking, because blocking writes are handled in the abstraction layer and retried later. - `Lost connection while sending' is a thing of the past. - <winsock.h> is no longer needed in most modules, because "putty.h" doesn't have to declare `SOCKET' variables any more, only the abstracted `Socket' type. - select()-equivalent between multiple sockets will now be handled sensibly, which opens the way for things like SSH port forwarding. More... over 24 years ago
Ooh. Actually, that vulnerability is further-reaching than I thought. As well as the ".." attack in recursive copies, the name sent by the client was also trusted in a single-file implicit- destination copy such as "pscp host:foo .". (The result was ./foo, where foo is what the server claimed the file was rather than what the user asked for. I think it's not unreasonable that if the user requests file `foo' from the host, he should get the result in a file called `foo' no matter what the host thinks.) More... over 24 years ago
Ooh. Actually, that vulnerability is further-reaching than I thought. As well as the ".." attack in recursive copies, the name sent by the client was also trusted in a single-file implicit- destination copy such as "pscp host:foo .". (The result was ./foo, where foo is what the server claimed the file was rather than what the user asked for. I think it's not unreasonable that if the user requests file `foo' from the host, he should get the result in a file called `foo' no matter what the host thinks.) More... over 24 years ago
Fix a potential vulnerability in incoming `pscp -r'. The server sends filenames of things in the directory being copied. A malicious server could have sent, for example, "..\..\windows\system\foo.dll" and overwritten something crucial. The filenames are now vetted to ensure they don't contain slashes or backslashes. More... over 24 years ago
Fix a potential vulnerability in incoming `pscp -r'. The server sends filenames of things in the directory being copied. A malicious server could have sent, for example, "..\..\windows\system\foo.dll" and overwritten something crucial. The filenames are now vetted to ensure they don't contain slashes or backslashes. More... over 24 years ago
Three new configurable options: - Robert de Bath's Compose key is now off by default and configurable on - The ages-old controversy over whether ALT by itself should bring the System menu up is now controllable by a config option - You can now independently configure whether scrollback resets on a keypress _and_ whether it resets on screen activity. More... over 24 years ago
Three new configurable options: - Robert de Bath's Compose key is now off by default and configurable on - The ages-old controversy over whether ALT by itself should bring the System menu up is now controllable by a config option - You can now independently configure whether scrollback resets on a keypress _and_ whether it resets on screen activity. More... over 24 years ago
Chinese support patch from [email protected] More... over 24 years ago
Chinese support patch from [email protected] More... over 24 years ago