diff options
| author | Kris Kennaway <kris@FreeBSD.org> | 2001-02-09 22:56:39 +0000 |
|---|---|---|
| committer | Kris Kennaway <kris@FreeBSD.org> | 2001-02-09 22:56:39 +0000 |
| commit | d6bcba78376a7f5f10789644764c663f2b8ca1ae (patch) | |
| tree | 6a0ad182d99f6e91fd87853ca36f5a7bcdd2723e /security/ssh/files/patch-ay | |
| parent | Bump PORTREVISION due to security fix. (diff) | |
Commit fixes for the two recent security problems found by BINDVIEW
and Core-SDI, and bump PORTREVISION.
Notes
Notes:
svn path=/head/; revision=38156
Diffstat (limited to 'security/ssh/files/patch-ay')
| -rw-r--r-- | security/ssh/files/patch-ay | 20 |
1 files changed, 20 insertions, 0 deletions
diff --git a/security/ssh/files/patch-ay b/security/ssh/files/patch-ay new file mode 100644 index 000000000000..51e949e323e3 --- /dev/null +++ b/security/ssh/files/patch-ay @@ -0,0 +1,20 @@ +--- rsaglue.c 1999/12/10 23:27:25 1.8 ++++ rsaglue.c 2001/02/03 09:42:05 +@@ -264,7 +268,15 @@ + mpz_clear(&aux); + + if (value[0] != 0 || value[1] != 2) +- fatal("Bad result from rsa_private_decrypt"); ++ { ++ static time_t last_kill_time = 0; ++ if (time(NULL) - last_kill_time > 60 && getppid() != 1) ++ { ++ last_kill_time = time(NULL); ++ kill(SIGALRM, getppid()); ++ } ++ fatal("Bad result from rsa_private_decrypt"); ++ } + + for (i = 2; i < len && value[i]; i++) + ; + |