- djm@cvs.openbsd.org 2006/03/22 21:27:15

     [deattack.c deattack.h packet.c]
     remove IV support from the CRC attack detector, OpenSSH has never used
     it - it only applied to IDEA-CFB, which we don't support.
     prompted by NetBSD Coverity report via elad AT netbsd.org;
     feedback markus@ "nuke it" deraadt@

diff --git a/packet.c b/packet.c
index ee9369638f43fb15930c9e8d6445947afcd95fe4..0121f8aee16402d39b0ae6992c5e0f2fdab54e3d 100644 (file)
--- a/packet.c
+++ b/packet.c
@@ -988,7 +988,7 @@ packet_read_poll1(void)
         * Ariel Futoransky(futo@core-sdi.com)
         */
        if (!receive_context.plaintext &&
-           detect_attack(buffer_ptr(&input), padded_len, NULL) == DEATTACK_DETECTED)
+           detect_attack(buffer_ptr(&input), padded_len) == DEATTACK_DETECTED)
                packet_disconnect("crc32 compensation attack: network attack detected");
 
        /* Decrypt data to incoming_packet. */