Version in base suite: 20190101-1 Base version: tinyssh_20190101-1 Target version: tinyssh_20190101-1+deb11u1 Base file: /srv/ftp-master.debian.org/ftp/pool/main/t/tinyssh/tinyssh_20190101-1.dsc Target file: /srv/ftp-master.debian.org/policy/pool/main/t/tinyssh/tinyssh_20190101-1+deb11u1.dsc changelog | 7 +++++++ patches/series | 1 + patches/workaround-1006801-packet-length.patch | 24 ++++++++++++++++++++++++ 3 files changed, 32 insertions(+) diff -Nru tinyssh-20190101/debian/changelog tinyssh-20190101/debian/changelog --- tinyssh-20190101/debian/changelog 2019-01-02 05:01:58.000000000 +0000 +++ tinyssh-20190101/debian/changelog 2022-03-19 07:28:29.000000000 +0000 @@ -1,3 +1,10 @@ +tinyssh (20190101-1+deb11u1) bullseye; urgency=medium + + * Workaround for incoming packets that doesn't honor + the max. packet length (Closes: 1006801) + + -- Jan Mojžíš Sat, 19 Mar 2022 08:28:29 +0100 + tinyssh (20190101-1) unstable; urgency=medium * d/tests - added 03exitcodes test, it creates ssh connection, exits diff -Nru tinyssh-20190101/debian/patches/series tinyssh-20190101/debian/patches/series --- tinyssh-20190101/debian/patches/series 1970-01-01 00:00:00.000000000 +0000 +++ tinyssh-20190101/debian/patches/series 2022-03-19 07:28:29.000000000 +0000 @@ -0,0 +1 @@ +workaround-1006801-packet-length.patch diff -Nru tinyssh-20190101/debian/patches/workaround-1006801-packet-length.patch tinyssh-20190101/debian/patches/workaround-1006801-packet-length.patch --- tinyssh-20190101/debian/patches/workaround-1006801-packet-length.patch 1970-01-01 00:00:00.000000000 +0000 +++ tinyssh-20190101/debian/patches/workaround-1006801-packet-length.patch 2022-03-19 07:28:29.000000000 +0000 @@ -0,0 +1,24 @@ +From: Jan Mojzis +Date: Sat, 19 Mar 2022 08:36:48 +0100 +Origin: https://github.com/janmojzis/tinyssh/commit/0613ae9ef2fbac88522c8312456fb64d14020597 +Subject: Workaround for incoming packets that doesn't honor + the max. packet length + +Index: tinyssh-20190101/tinyssh/packet_channel_open.c +=================================================================== +--- tinyssh-20190101.orig/tinyssh/packet_channel_open.c ++++ tinyssh-20190101/tinyssh/packet_channel_open.c +@@ -49,7 +49,12 @@ int packet_channel_open(struct buf *b1, + buf_putnum32(b2, id); /* uint32 recipient channel */ + buf_putnum32(b2, id); /* uint32 sender channel */ + buf_putnum32(b2, localwindow); /* uint32 initial window size */ +- buf_putnum32(b2, PACKET_LIMIT); /* uint32 maximum packet size */ ++ /* ++ XXX ++ use PACKET_LIMIT/2 as maximum packet size, ++ workaround for miscalculated packet_length ++ */ ++ buf_putnum32(b2, PACKET_LIMIT / 2); /* uint32 maximum packet size */ + packet_put(b2); + buf_purge(b2); + return 1;