Differences From Artifact [f33d1286ce]:

• File ssh.c — part of check-in [d0d528cb50] at 2002-12-18 03:47:20 on branch trunk — logeventf()'s first argument is ssh, not ssh->frontend! This is what I get for making the latter a `void *' - type checking deserts me in my hour of need. Should fix Andrey Borzenkov's bug. (user: simon size: 184059)

To Artifact [fcbded294e]:

• File ssh.c — part of check-in [ae5af25955] at 2002-12-18 04:06:38 on branch trunk — BUG_SSH2_DERIVEKEY is apparently only present in SSH 2.0.11 and before, not in 2.0.13. Verified on at least one host. Fixes bug `ssh2-keyderive-nonbug'. (user: simon size: 184092)

1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798

	 */
	ssh->remote_bugs |= BUG_SSH2_HMAC;
	logevent("We believe remote version has SSH2 HMAC bug");
    }

    if (cfg.sshbug_derivekey2 == BUG_ON ||
	(cfg.sshbug_derivekey2 == BUG_AUTO &&
	 (wc_match("2.0.*", imp)))) {
	/*
	 * These versions have the key-derivation bug (failing to
	 * include the literal shared secret in the hashes that
	 * generate the keys).
	 */
	ssh->remote_bugs |= BUG_SSH2_DERIVEKEY;
	logevent("We believe remote version has SSH2 key-derivation bug");

|

1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798

	 */
	ssh->remote_bugs |= BUG_SSH2_HMAC;
	logevent("We believe remote version has SSH2 HMAC bug");
    }

    if (cfg.sshbug_derivekey2 == BUG_ON ||
	(cfg.sshbug_derivekey2 == BUG_AUTO &&
	 (wc_match("2.0.0*", imp) || wc_match("2.0.1[01]*", imp) ))) {
	/*
	 * These versions have the key-derivation bug (failing to
	 * include the literal shared secret in the hashes that
	 * generate the keys).
	 */
	ssh->remote_bugs |= BUG_SSH2_DERIVEKEY;
	logevent("We believe remote version has SSH2 key-derivation bug");