Bug 1763

Summary:	Side effects from public key options
Product:	Portable OpenSSH	Reporter:	Damien Miller <djm>
Component:	sshd	Assignee:	Assigned to nobody <unassigned-bugs>
Status:	CLOSED FIXED
Severity:	normal
Priority:	P2
Version:	-current
Hardware:	All
OS:	All
Bug Depends on:
Bug Blocks:	1708

Description Damien Miller 2010-04-28 14:57:39 AEST

auth-options.c tries to back out options set for a public key if public key authentication fails, but there are some cases where this is incomplete or buggy:

command= can memory leak if there are multiple command options on a key

permitopen= options are not backed out at all

Comment 1 Damien Miller 2010-06-18 13:06:09 AEST

the leak on multiple command= options is fixed in -current.

Comment 2 Damien Miller 2010-06-18 13:08:12 AEST

... and I was wrong to begin with about permitopen= options not being cleared.

Comment 3 Damien Miller 2011-01-24 12:33:58 AEDT

Move resolved bugs to CLOSED after 5.7 release