CVSROOT: /cvs Module name: src Changes by: mar...@cvs.openbsd.org 2016/10/10 13:28:48
Modified files:
usr.bin/ssh : kex.c
Log message:
Unregister the KEXINIT handler after message has been received.
Otherwise an unauthenticated peer can repeat the KEXINIT and cause
allocation of up to 128MB -- until the connection is closed.
Reported by shilei-c at 360.cn
