simon-svn: putty: ben

[tartarus-commits at lists.tartarus.org]

SVN root:       svn://ixion.tartarus.org/main
Changes by:     ben
Revision:       5981
Date:           2005-06-20 14:56:30 +0100 (Mon, 20 Jun 2005)

Log message (9 lines):
Make the sanity-checks on the size of incoming packets much stricter.  We now
enforce the following:

* Packet must have at least one byte of payload and four bytes of padding.
* Total packet length must not exceed 35000 bytes compressed.
* Total packet length including length field must be a multiple of cipher
  block size (or eight bytes).

The feebleness of our old checks was noticed by Ben Rudiak-Gould.

Modified files:
U   putty/ssh.c

Links:
http://www.tartarus.org/~simon-anonsvn/viewcvs.cgi?rev=5981&view=rev
http://www.tartarus.org/~simon-anonsvn/viewcvs.cgi/putty/ssh.c?rev=5981&r1=5980&r2=5981