CVSROOT: /cvs Module name: src Changes by: d...@cvs.openbsd.org 2024/10/17 23:03:34
Modified files: usr.bin/ssh : ssh.c Log message: require control-escape character sequences passed via the '-e ^x' commandline to be exactly two characters long. Avoids one by OOB read if ssh is invoked as "ssh -e^ ..." Spotted by Maciej Domanski in GHPR368