[BACK]Return to auth.c CVS log [TXT][DIR] Up to [local] / src / usr.bin / ssh

Diff for /src/usr.bin/ssh/auth.c between version 1.152 and 1.153

version 1.152, 2021/04/03 06:18:40 version 1.153, 2021/07/05 00:50:25
Line 615 
Line 615 
  * be freed. NB. this will usually trigger a DNS query the first time it is   * be freed. NB. this will usually trigger a DNS query the first time it is
  * called.   * called.
  * This function does additional checks on the hostname to mitigate some   * This function does additional checks on the hostname to mitigate some
  * attacks on legacy rhosts-style authentication.   * attacks on based on conflation of hostnames and IP addresses.
  * XXX is RhostsRSAAuthentication vulnerable to these?  
  * XXX Can we remove these checks? (or if not, remove RhostsRSAAuthentication?)  
  */   */
   
 static char *  static char *
Legend:
Removed from v.1.152  
changed lines
  Added in v.1.153