From owner-cvs-all@FreeBSD.ORG  Mon Mar 31 05:45:41 2003
Return-Path: <owner-cvs-all@FreeBSD.ORG>
Delivered-To: cvs-all@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id 29EFD37B401; Mon, 31 Mar 2003 05:45:37 -0800 (PST)
Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 05F1643F75; Mon, 31 Mar 2003 05:45:37 -0800 (PST)
	(envelope-from des@FreeBSD.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
	by repoman.freebsd.org (8.12.6/8.12.6) with ESMTP id h2VDja0U072035;
	Mon, 31 Mar 2003 05:45:36 -0800 (PST)
	(envelope-from des@repoman.freebsd.org)
Received: (from des@localhost)
	by repoman.freebsd.org (8.12.6/8.12.6/Submit) id h2VDjahD072034;
	Mon, 31 Mar 2003 05:45:36 -0800 (PST)
Message-Id: <200303311345.h2VDjahD072034@repoman.freebsd.org>
From: Dag-Erling Smorgrav <des@FreeBSD.org>
Date: Mon, 31 Mar 2003 05:45:36 -0800 (PST)
To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org,
	cvs-all@FreeBSD.org
X-FreeBSD-CVS-Branch: HEAD
Subject: cvs commit: src/crypto/openssh auth-chall.c auth.h auth1.c
X-BeenThere: cvs-all@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: CVS commit messages for the entire tree <cvs-all.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-all>
List-Post: <mailto:cvs-all@freebsd.org>
List-Help: <mailto:cvs-all-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 31 Mar 2003 13:45:43 -0000

des         2003/03/31 05:45:36 PST

  FreeBSD src repository

  Modified files:
    crypto/openssh       auth-chall.c auth.h auth1.c 
  Log:
  If an ssh1 client initiated challenge-response authentication but did
  not respond to challenge, and later successfully authenticated itself
  using another method, the kbdint context would never be released,
  leaving the PAM child process behind even after the connection ended.
  
  Fix this by automatically releasing the kbdint context if a packet of
  type SSH_CMSG_AUTH_TIS is follwed by anything but a packet of type
  SSH_CMSG_AUTH_TIS_RESPONSE.
  
  MFC after:      1 week
  
  Revision  Changes    Path
  1.6       +8 -0      src/crypto/openssh/auth-chall.c
  1.10      +1 -0      src/crypto/openssh/auth.h
  1.26      +13 -1     src/crypto/openssh/auth1.c