[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: [Christoph Martin: idle-timeout]



Am Sam, 2002-04-06 um 06.31 schrieb Aaron M. Ucko:
> "Aaron M. Ucko" <ucko@debian.org> writes:
> 
> > Ah, well, it never hurts to ask. :-)  In that case, I'll see what I
> > can do about updating Jani's patch this weekend.
> 
> OK, please try this patch relative to the latest Debian version
> (3.0.2p1-8.3).  I have verified that it looks sane and compiles
> happily, but have not yet actually run it, so you may wish to exercise
> some caution.

It is not working. It hangs indefinitely. The following debug output is
independent of the IdleTimeout setting:

ssh:
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-cbc hmac-md5 none
debug1: kex: client->server aes128-cbc hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP

sshd:
debug1: SSH2_MSG_KEXINIT sent
debug1: no timeout
debug1: no timeout
debug1: no timeout

ssh -1:
debug1: Encryption type: 3des
debug1: Sent encrypted session key.

sshd:
debug1: Sent 768 bit server key and 1024 bit host key.
debug1: no timeout
debug1: no timeout

You change packet.c with the following patch:
--- packet.c.~1~        Sat Apr  6 09:42:18 2002
+++ packet.c    Sat Apr  6 11:23:33 2002
@@ -1000,13 +1000,9 @@
        char *msg;
 
        for (;;) {
-               int type = compat20 ?
-                   packet_read_poll2(payload_len_ptr):
-                   packet_read_poll1(payload_len_ptr);
-
-               idletimeout_check(type);
                if (compat20) {
                        type = packet_read_poll2(payload_len_ptr);
+                       idletimeout_check(type);
                        if (type)
                                DBG(debug("received packet type %d",
type));
                        switch(type) {
@@ -1034,6 +1030,7 @@
                        }
                } else {
                        type = packet_read_poll1(payload_len_ptr);
+                       idletimeout_check(type);
                        switch(type) {
                        case SSH_MSG_IGNORE:
                                break;

Attachment: signature.asc
Description: Dies ist ein digital signierter Nachrichtenteil


Reply to: