- dtucker@cvs.openbsd.org 2014/07/25 21:22:03
     [ssh-agent.c]
     Clear buffer used for handling messages.  This prevents keys being
     left in memory after they have been expired or deleted in some cases
     (but note that ssh-agent is setgid so you would still need root to
     access them).  Pointed out by Kevin Burns, ok deraadt
2 files changed
tree: 5c6724353686d4621a6c3328ea589075ef5a7abc
  1. .cvsignore
  2. CREDITS
  3. ChangeLog
  4. INSTALL
  5. LICENCE
  6. Makefile.in
  7. OVERVIEW
  8. PROTOCOL
  9. PROTOCOL.agent
  10. PROTOCOL.certkeys
  11. PROTOCOL.chacha20poly1305
  12. PROTOCOL.key
  13. PROTOCOL.krl
  14. PROTOCOL.mux
  15. README
  16. README.dns
  17. README.platform
  18. README.privsep
  19. README.tun
  20. TODO
  21. aclocal.m4
  22. addrmatch.c
  23. atomicio.c
  24. atomicio.h
  25. audit-bsm.c
  26. audit-linux.c
  27. audit.c
  28. audit.h
  29. auth-bsdauth.c
  30. auth-chall.c
  31. auth-krb5.c
  32. auth-options.c
  33. auth-options.h
  34. auth-pam.c
  35. auth-pam.h
  36. auth-passwd.c
  37. auth-rh-rsa.c
  38. auth-rhosts.c
  39. auth-rsa.c
  40. auth-shadow.c
  41. auth-sia.c
  42. auth-sia.h
  43. auth-skey.c
  44. auth.c
  45. auth.h
  46. auth1.c
  47. auth2-chall.c
  48. auth2-gss.c
  49. auth2-hostbased.c
  50. auth2-kbdint.c
  51. auth2-none.c
  52. auth2-passwd.c
  53. auth2-pubkey.c
  54. auth2.c
  55. authfd.c
  56. authfd.h
  57. authfile.c
  58. authfile.h
  59. blocks.c
  60. bufaux.c
  61. bufbn.c
  62. bufec.c
  63. buffer.c
  64. buffer.h
  65. buildpkg.sh.in
  66. canohost.c
  67. canohost.h
  68. chacha.c
  69. chacha.h
  70. channels.c
  71. channels.h
  72. cipher-3des1.c
  73. cipher-aes.c
  74. cipher-aesctr.c
  75. cipher-aesctr.h
  76. cipher-bf1.c
  77. cipher-chachapoly.c
  78. cipher-chachapoly.h
  79. cipher-ctr.c
  80. cipher.c
  81. cipher.h
  82. cleanup.c
  83. clientloop.c
  84. clientloop.h
  85. compat.c
  86. compat.h
  87. compress.c
  88. compress.h
  89. config.guess
  90. config.sub
  91. configure.ac
  92. contrib/
  93. crc32.c
  94. crc32.h
  95. crypto_api.h
  96. deattack.c
  97. deattack.h
  98. defines.h
  99. dh.c
  100. dh.h
  101. digest-libc.c
  102. digest-openssl.c
  103. digest.h
  104. dispatch.c
  105. dispatch.h
  106. dns.c
  107. dns.h
  108. ed25519.c
  109. entropy.c
  110. entropy.h
  111. fatal.c
  112. fe25519.c
  113. fe25519.h
  114. fixalgorithms
  115. fixpaths
  116. fixprogs
  117. ge25519.c
  118. ge25519.h
  119. ge25519_base.data
  120. groupaccess.c
  121. groupaccess.h
  122. gss-genr.c
  123. gss-serv-krb5.c
  124. gss-serv.c
  125. hash.c
  126. hmac.c
  127. hmac.h
  128. hostfile.c
  129. hostfile.h
  130. includes.h
  131. install-sh
  132. kex.c
  133. kex.h
  134. kexc25519.c
  135. kexc25519c.c
  136. kexc25519s.c
  137. kexdh.c
  138. kexdhc.c
  139. kexdhs.c
  140. kexecdh.c
  141. kexecdhc.c
  142. kexecdhs.c
  143. kexgex.c
  144. kexgexc.c
  145. kexgexs.c
  146. key.c
  147. key.h
  148. krl.c
  149. krl.h
  150. log.c
  151. log.h
  152. loginrec.c
  153. loginrec.h
  154. logintest.c
  155. mac.c
  156. mac.h
  157. match.c
  158. match.h
  159. md-sha256.c
  160. md5crypt.c
  161. md5crypt.h
  162. mdoc2man.awk
  163. misc.c
  164. misc.h
  165. mkinstalldirs
  166. moduli
  167. moduli.5
  168. moduli.c
  169. monitor.c
  170. monitor.h
  171. monitor_fdpass.c
  172. monitor_fdpass.h
  173. monitor_mm.c
  174. monitor_mm.h
  175. monitor_wrap.c
  176. monitor_wrap.h
  177. msg.c
  178. msg.h
  179. mux.c
  180. myproposal.h
  181. nchan.c
  182. nchan.ms
  183. nchan2.ms
  184. openbsd-compat/
  185. openssh.xml.in
  186. opensshd.init.in
  187. packet.c
  188. packet.h
  189. pathnames.h
  190. pkcs11.h
  191. platform.c
  192. platform.h
  193. poly1305.c
  194. poly1305.h
  195. progressmeter.c
  196. progressmeter.h
  197. readconf.c
  198. readconf.h
  199. readpass.c
  200. regress/
  201. rijndael.c
  202. rijndael.h
  203. roaming.h
  204. roaming_client.c
  205. roaming_common.c
  206. roaming_dummy.c
  207. roaming_serv.c
  208. rsa.c
  209. rsa.h
  210. sandbox-capsicum.c
  211. sandbox-darwin.c
  212. sandbox-null.c
  213. sandbox-rlimit.c
  214. sandbox-seccomp-filter.c
  215. sandbox-systrace.c
  216. sc25519.c
  217. sc25519.h
  218. scard/
  219. scp.1
  220. scp.c
  221. servconf.c
  222. servconf.h
  223. serverloop.c
  224. serverloop.h
  225. session.c
  226. session.h
  227. sftp-client.c
  228. sftp-client.h
  229. sftp-common.c
  230. sftp-common.h
  231. sftp-glob.c
  232. sftp-server-main.c
  233. sftp-server.8
  234. sftp-server.c
  235. sftp.1
  236. sftp.c
  237. sftp.h
  238. smult_curve25519_ref.c
  239. ssh-add.1
  240. ssh-add.c
  241. ssh-agent.1
  242. ssh-agent.c
  243. ssh-dss.c
  244. ssh-ecdsa.c
  245. ssh-ed25519.c
  246. ssh-gss.h
  247. ssh-keygen.1
  248. ssh-keygen.c
  249. ssh-keyscan.1
  250. ssh-keyscan.c
  251. ssh-keysign.8
  252. ssh-keysign.c
  253. ssh-pkcs11-client.c
  254. ssh-pkcs11-helper.8
  255. ssh-pkcs11-helper.c
  256. ssh-pkcs11.c
  257. ssh-pkcs11.h
  258. ssh-rsa.c
  259. ssh-sandbox.h
  260. ssh.1
  261. ssh.c
  262. ssh.h
  263. ssh1.h
  264. ssh2.h
  265. ssh_config
  266. ssh_config.5
  267. sshbuf-getput-basic.c
  268. sshbuf-getput-crypto.c
  269. sshbuf-misc.c
  270. sshbuf.c
  271. sshbuf.h
  272. sshconnect.c
  273. sshconnect.h
  274. sshconnect1.c
  275. sshconnect2.c
  276. sshd.8
  277. sshd.c
  278. sshd_config
  279. sshd_config.5
  280. ssherr.c
  281. ssherr.h
  282. sshkey.c
  283. sshkey.h
  284. sshlogin.c
  285. sshlogin.h
  286. sshpty.c
  287. sshpty.h
  288. sshtty.c
  289. survey.sh.in
  290. ttymodes.c
  291. ttymodes.h
  292. uidswap.c
  293. uidswap.h
  294. umac.c
  295. umac.h
  296. uuencode.c
  297. uuencode.h
  298. verify.c
  299. version.h
  300. xmalloc.c
  301. xmalloc.h