CVSROOT: /cvs Module name: src Changes by: [email protected] 2026/05/30 22:31:05
Modified files:
usr.bin/ssh : ssh-agent.c
Log message:
Enforce a maximum size for usernames in agent key use constraints
Along with the match_pattern() performance change that was just
committed this avoids a denial-of-service where an agent client could
waste CPU on an agent by sending user constraints with lots of
wildcards.
Reported by Huzaifa Sidhpurwala of Redhat
ok markus
