move #include <string.h> out of includes.h

move #include <unistd.h> out of includes.h

move #include <netdb.h> out of includes.h; ok djm@

move #include <errno.h> out of includes.h; ok markus@

Add port identifier to known_hosts for non-default ports, based originally
on a patch from Devin Nate in bz#910.

For any connection using the default port or using a HostKeyAlias the
format is uncha

Add port identifier to known_hosts for non-default ports, based originally
on a patch from Devin Nate in bz#910.

For any connection using the default port or using a HostKeyAlias the
format is unchanged, otherwise the host name or address is enclosed
within square brackets in the same format as sshd's ListenAddress.

Tested by many, ok markus@.

show more ...

move #include <pwd.h> out of includes.h; ok markus@

move #include <netinet/in.h> out of includes.h; ok deraadt@

move #include "version.h" out of includes.h; ok markus@

limit the number of pre-banner characters we will accept; ok markus@

do not set the gid, noted by solar; ok djm

replace remaining setuid() calls with permanently_set_uid() and
check seteuid() return values; report Marcus Meissner; ok dtucker djm

fix leak; coverity via Kylene Jo Hall

simplify; ok djm@

Put $OpenBSD$ tags back (as comments) to replace the RCSID()s that
Theo nuked - our scripts to sync -portable need them in the files

introduce xcalloc() and xasprintf() failure-checked allocations functions
and use them throughout openssh

xcalloc is particularly important because malloc(nmemb * size) is a
dangerous idiom (subject

introduce xcalloc() and xasprintf() failure-checked allocations functions
and use them throughout openssh

xcalloc is particularly important because malloc(nmemb * size) is a
dangerous idiom (subject to integer overflow) and it is time for it to
die

feedback and ok deraadt@

show more ...

be strict with tolower() casting

RCSID() can die

move #include <ctype.h> out of includes.h; ok djm@

move #include <sys/stat.h> out of includes.h; ok markus@

move #include <sys/wait.h> out of includes.h; ok markus@

<openssl/bn.h> not needed

move #include <paths.h> out of includes.h; ok markus@

Add support for tun(4) forwarding over OpenSSH, based on an idea and
initial channel code bits by markus@. This is a simple and easy way to
use OpenSSH for ad hoc virtual private network connections,

Add support for tun(4) forwarding over OpenSSH, based on an idea and
initial channel code bits by markus@. This is a simple and easy way to
use OpenSSH for ad hoc virtual private network connections, e.g.
administrative tunnels or secure wireless access. It's based on a new
ssh channel and works similar to the existing TCP forwarding support,
except that it depends on the tun(4) network interface on both ends of
the connection for layer 2 or layer 3 tunneling. This diff also adds
support for LocalCommand in the ssh(1) client.

ok djm@, markus@, jmc@ (manpages), tested and discussed with others

show more ...

no need to escape single quotes in comments, no binary change

make external definition static; ok deraadt@