CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/10/29 23:52:02
Modified files:
usr.bin/ssh : canohost.c
Log message:
ssh-keysign identifies the name that it will sign a hostbased challenge
for using the connected socket. On some platforms it's possible to
construct that returns an off-host address via getpeername(). In these
cases, ssh-keysign (if enabled) can be tricked into a signing a challenge
for an arbitrary destination if a bunch other default-off dominos fall
just right.
This checks that the peername of the socket is actually an address that
appears on an attached interface.
Anthropic ANT-2026-1BDN8VMO
