CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/10/29 22:36:21
Modified files:
usr.bin/ssh : kex.c packet.c packet.h
Log message:
make strict KEX errors return an error rather than fatal()ing the
process. This avoids ssh-keyscan crashing out when one host of many
fails strict KEX.
To avoid the risk of continuing past such a failure in ssh or sshd, make
such failures "poison" the packet code so that future attempts to send
or receive packets always an error.
Anthropic ANT-2026-TU0DN0EM (poisoning bit by me)
