openhub.net
Black Duck Software, Inc.
Open Hub
Follow @
OH
Sign In
Join Now
Projects
People
Organizations
Tools
Blog
BDSA
Projects
People
Projects
Organizations
Forums
FuTTY
Settings
|
Report Duplicate
1
I Use This!
×
Login Required
Log in to Open Hub
Remember Me
Activity Not Available
Commits
: Listings
Analyzed
about 1 year
ago. based on code collected
about 1 year
ago.
Jan 19, 2023 — Jan 19, 2024
Showing page 238 of 260
Search / Filter on:
Commit Message
Contributor
Files Modified
Lines Added
Lines Removed
Code Location
Date
SSH2 connections weren't closing cleanly after socket revamp. Fixed.
simon
More...
over 24 years ago
SSH2 connections weren't closing cleanly after socket revamp. Fixed.
Simon Tatham
More...
over 24 years ago
Window resizing wasn't working in SSH2
simon
More...
over 24 years ago
Window resizing wasn't working in SSH2
Simon Tatham
More...
over 24 years ago
Make the frankly ridiculous prototypes for modpow() and modmul() more sane
Simon Tatham
More...
over 24 years ago
Make the frankly ridiculous prototypes for modpow() and modmul() more sane
simon
More...
over 24 years ago
Update DSS implementation to use new bignum routines
simon
More...
over 24 years ago
Update DSS implementation to use new bignum routines
Simon Tatham
More...
over 24 years ago
Improved entropy gathering.
Simon Tatham
More...
over 24 years ago
Improved entropy gathering.
simon
More...
over 24 years ago
Fix a bug which was causing occasional failed-host-key-check messages. Also left some diagnostics in, under #if 0, so that next time this happens it'll be easier to debug.
Simon Tatham
More...
over 24 years ago
Fix a bug which was causing occasional failed-host-key-check messages. Also left some diagnostics in, under #if 0, so that next time this happens it'll be easier to debug.
simon
More...
over 24 years ago
Oops. A field like `sending_oob' in the Socket structure really deserves to be initialised to something sane at creation time.
Simon Tatham
More...
over 24 years ago
Oops. A field like `sending_oob' in the Socket structure really deserves to be initialised to something sane at creation time.
simon
More...
over 24 years ago
Plink and PSCP were failing to load the `Default Settings' options when connecting to an arbitrary hostname. In particular, setting a default user name didn't work. Now it does.
Simon Tatham
More...
over 24 years ago
Plink and PSCP were failing to load the `Default Settings' options when connecting to an arbitrary hostname. In particular, setting a default user name didn't work. Now it does.
simon
More...
over 24 years ago
Remove the NO_SECURITY define I accidentally copied from Pageant
Simon Tatham
More...
over 24 years ago
Remove the NO_SECURITY define I accidentally copied from Pageant
simon
More...
over 24 years ago
Created a shiny new abstraction for the socket handling. Has many advantages: - protocol modules can call sk_write() without having to worry about writes blocking, because blocking writes are handled in the abstraction layer and retried later. - `Lost connection while sending' is a thing of the past. - <winsock.h> is no longer needed in most modules, because "putty.h" doesn't have to declare `SOCKET' variables any more, only the abstracted `Socket' type. - select()-equivalent between multiple sockets will now be handled sensibly, which opens the way for things like SSH port forwarding.
simon
More...
over 24 years ago
Created a shiny new abstraction for the socket handling. Has many advantages: - protocol modules can call sk_write() without having to worry about writes blocking, because blocking writes are handled in the abstraction layer and retried later. - `Lost connection while sending' is a thing of the past. - <winsock.h> is no longer needed in most modules, because "putty.h" doesn't have to declare `SOCKET' variables any more, only the abstracted `Socket' type. - select()-equivalent between multiple sockets will now be handled sensibly, which opens the way for things like SSH port forwarding.
Simon Tatham
More...
over 24 years ago
Created a shiny new abstraction for the socket handling. Has many advantages: - protocol modules can call sk_write() without having to worry about writes blocking, because blocking writes are handled in the abstraction layer and retried later. - `Lost connection while sending' is a thing of the past. - <winsock.h> is no longer needed in most modules, because "putty.h" doesn't have to declare `SOCKET' variables any more, only the abstracted `Socket' type. - select()-equivalent between multiple sockets will now be handled sensibly, which opens the way for things like SSH port forwarding.
Simon Tatham
More...
over 24 years ago
Created a shiny new abstraction for the socket handling. Has many advantages: - protocol modules can call sk_write() without having to worry about writes blocking, because blocking writes are handled in the abstraction layer and retried later. - `Lost connection while sending' is a thing of the past. - <winsock.h> is no longer needed in most modules, because "putty.h" doesn't have to declare `SOCKET' variables any more, only the abstracted `Socket' type. - select()-equivalent between multiple sockets will now be handled sensibly, which opens the way for things like SSH port forwarding.
simon
More...
over 24 years ago
Ooh. Actually, that vulnerability is further-reaching than I thought. As well as the ".." attack in recursive copies, the name sent by the client was also trusted in a single-file implicit- destination copy such as "pscp host:foo .". (The result was ./foo, where foo is what the server claimed the file was rather than what the user asked for. I think it's not unreasonable that if the user requests file `foo' from the host, he should get the result in a file called `foo' no matter what the host thinks.)
simon
More...
over 24 years ago
Ooh. Actually, that vulnerability is further-reaching than I thought. As well as the ".." attack in recursive copies, the name sent by the client was also trusted in a single-file implicit- destination copy such as "pscp host:foo .". (The result was ./foo, where foo is what the server claimed the file was rather than what the user asked for. I think it's not unreasonable that if the user requests file `foo' from the host, he should get the result in a file called `foo' no matter what the host thinks.)
Simon Tatham
More...
over 24 years ago
Fix a potential vulnerability in incoming `pscp -r'. The server sends filenames of things in the directory being copied. A malicious server could have sent, for example, "..\..\windows\system\foo.dll" and overwritten something crucial. The filenames are now vetted to ensure they don't contain slashes or backslashes.
Simon Tatham
More...
over 24 years ago
Fix a potential vulnerability in incoming `pscp -r'. The server sends filenames of things in the directory being copied. A malicious server could have sent, for example, "..\..\windows\system\foo.dll" and overwritten something crucial. The filenames are now vetted to ensure they don't contain slashes or backslashes.
simon
More...
over 24 years ago
Three new configurable options: - Robert de Bath's Compose key is now off by default and configurable on - The ages-old controversy over whether ALT by itself should bring the System menu up is now controllable by a config option - You can now independently configure whether scrollback resets on a keypress _and_ whether it resets on screen activity.
Simon Tatham
More...
over 24 years ago
Three new configurable options: - Robert de Bath's Compose key is now off by default and configurable on - The ages-old controversy over whether ALT by itself should bring the System menu up is now controllable by a config option - You can now independently configure whether scrollback resets on a keypress _and_ whether it resets on screen activity.
simon
More...
over 24 years ago
Chinese support patch from
[email protected]
Simon Tatham
More...
over 24 years ago
Chinese support patch from
[email protected]
simon
More...
over 24 years ago
←
1
2
…
234
235
236
237
238
239
240
241
242
…
259
260
→
This site uses cookies to give you the best possible experience. By using the site, you consent to our use of cookies. For more information, please see our
Privacy Policy
Agree