aboutsummaryrefslogtreecommitdiffstats
path: root/crypto
diff options
context:
space:
mode:
authorXin LI <delphij@FreeBSD.org>2016-11-02 06:56:35 +0000
committerXin LI <delphij@FreeBSD.org>2016-11-02 06:56:35 +0000
commitb51484f9495099ad6fbeb0b4f77b1d4215963260 (patch)
tree0d88d0e6ddc3e38ac31cbb62dccf48fa5820f5ec /crypto
parent5829c7e7d2b945217e883b4bc2705ca406a786e0 (diff)
downloadsrc-b51484f9495099ad6fbeb0b4f77b1d4215963260.tar.gz
src-b51484f9495099ad6fbeb0b4f77b1d4215963260.zip
MFC r308197: MFV r308196:
Fix OpenSSH remote Denial of Service vulnerability. Security: CVE-2016-8858
Notes
Notes: svn path=/stable/11/; revision=308198
Diffstat (limited to 'crypto')
-rw-r--r--crypto/openssh/kex.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/crypto/openssh/kex.c b/crypto/openssh/kex.c
index d371f47c48dd..9c9f56228ea5 100644
--- a/crypto/openssh/kex.c
+++ b/crypto/openssh/kex.c
@@ -468,6 +468,7 @@ kex_input_kexinit(int type, u_int32_t seq, void *ctxt)
if (kex == NULL)
return SSH_ERR_INVALID_ARGUMENT;
+ ssh_dispatch_set(ssh, SSH2_MSG_KEXINIT, NULL);
ptr = sshpkt_ptr(ssh, &dlen);
if ((r = sshbuf_put(kex->peer, ptr, dlen)) != 0)
return r;