| Line | Source | Count |
| 1 | | - |
| 2 | | - |
| 3 | | - |
| 4 | | - |
| 5 | | - |
| 6 | | - |
| 7 | | - |
| 8 | | - |
| 9 | | - |
| 10 | | - |
| 11 | | - |
| 12 | | - |
| 13 | | - |
| 14 | | - |
| 15 | | - |
| 16 | | - |
| 17 | | - |
| 18 | | - |
| 19 | | - |
| 20 | | - |
| 21 | | - |
| 22 | extern char *client_version_string; | - |
| 23 | extern char *server_version_string; | - |
| 24 | extern Options options; | - |
| 25 | | - |
| 26 | | - |
| 27 | | - |
| 28 | | - |
| 29 | | - |
| 30 | u_char *session_id2 = | - |
| 31 | ((void *)0) | - |
| 32 | ; | - |
| 33 | u_int session_id2_len = 0; | - |
| 34 | | - |
| 35 | char *xxx_host; | - |
| 36 | struct sockaddr *xxx_hostaddr; | - |
| 37 | | - |
| 38 | static int | - |
| 39 | verify_host_key_callback(struct sshkey *hostkey, struct ssh *ssh) | - |
| 40 | { | - |
| 41 | if (verify_host_key(xxx_host, xxx_hostaddr, hostkey) == -1| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 42 | fatal("Host key verification failed."); never executed: fatal("Host key verification failed."); | 0 |
| 43 | return never executed: return 0; 0;never executed: return 0; | 0 |
| 44 | } | - |
| 45 | | - |
| 46 | static char * | - |
| 47 | order_hostkeyalgs(char *host, struct sockaddr *hostaddr, u_short port) | - |
| 48 | { | - |
| 49 | char *oavail, *avail, *first, *last, *alg, *hostname, *ret; | - |
| 50 | size_t maxlen; | - |
| 51 | struct hostkeys *hostkeys; | - |
| 52 | int ktype; | - |
| 53 | u_int i; | - |
| 54 | | - |
| 55 | | - |
| 56 | get_hostfile_hostname_ipaddr(host, hostaddr, port, &hostname, | - |
| 57 | ((void *)0) | - |
| 58 | ); | - |
| 59 | hostkeys = init_hostkeys(); | - |
| 60 | for (i = 0; i < options.num_user_hostfiles| TRUE | never evaluated | | FALSE | never evaluated |
; i++) | 0 |
| 61 | load_hostkeys(hostkeys, hostname, options.user_hostfiles[i]); never executed: load_hostkeys(hostkeys, hostname, options.user_hostfiles[i]); | 0 |
| 62 | for (i = 0; i < options.num_system_hostfiles| TRUE | never evaluated | | FALSE | never evaluated |
; i++) | 0 |
| 63 | load_hostkeys(hostkeys, hostname, options.system_hostfiles[i]); never executed: load_hostkeys(hostkeys, hostname, options.system_hostfiles[i]); | 0 |
| 64 | | - |
| 65 | oavail = avail = xstrdup("ecdsa-sha2-nistp256-cert-v01@openssh.com," "ecdsa-sha2-nistp384-cert-v01@openssh.com," "ecdsa-sha2-nistp521-cert-v01@openssh.com," "ssh-ed25519-cert-v01@openssh.com," "rsa-sha2-512-cert-v01@openssh.com," "rsa-sha2-256-cert-v01@openssh.com," "ssh-rsa-cert-v01@openssh.com," "ecdsa-sha2-nistp256," "ecdsa-sha2-nistp384," "ecdsa-sha2-nistp521," "ssh-ed25519," "rsa-sha2-512," "rsa-sha2-256," "ssh-rsa"); | - |
| 66 | maxlen = strlen(avail) + 1; | - |
| 67 | first = xmalloc(maxlen); | - |
| 68 | last = xmalloc(maxlen); | - |
| 69 | *first = *last = '\0'; | - |
| 70 | while ((| TRUE | never evaluated | | FALSE | never evaluated |
alg = | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 71 | __extension__ ({ char __r0, __r1, __r2; (__builtin_constant_p (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 72 | ","| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 73 | ) && ((size_t)(const void *)((| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 74 | ","| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 75 | ) + 1) - (size_t)(const void *)(| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 76 | ","| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 77 | ) == 1) && (__r0 = ((const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 78 | ","| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 79 | ))[0], ((const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 80 | ","| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 81 | ))[0] != '\0') ? ((__r1 = ((const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 82 | ","| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 83 | ))[1], ((const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 84 | ","| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 85 | ))[1] == '\0') ? __strsep_1c (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 86 | &avail| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 87 | , __r0) : ((__r2 = ((const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 88 | ","| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 89 | ))[2], __r2 == '\0') ? __strsep_2c (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 90 | &avail| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 91 | , __r0, __r1) : (((const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 92 | ","| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 93 | ))[3] == '\0' ? __strsep_3c (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 94 | &avail| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 95 | , __r0, __r1, __r2) : __strsep_g (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 96 | &avail| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 97 | , | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 98 | ","| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 99 | )))) : __strsep_g (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 100 | &avail| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 101 | , | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 102 | ","| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 103 | )); })| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 104 | )| TRUE | never evaluated | | FALSE | never evaluated |
&& *| TRUE | never evaluated | | FALSE | never evaluated |
alg != '\0'| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 105 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
ktype = sshkey_type_from_name(alg)) == KEY_UNSPEC| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 106 | fatal("%s: unknown alg %s", __func__, alg); never executed: fatal("%s: unknown alg %s", __func__, alg); | 0 |
| 107 | if (lookup_key_in_hostkeys_by_type(hostkeys,| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 108 | sshkey_type_plain(ktype), | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 109 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 110 | )| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 111 | do { if (*| TRUE | never evaluated | | FALSE | never evaluated |
first != '\0'| TRUE | never evaluated | | FALSE | never evaluated |
) strlcat(first, ",", maxlen);never executed: strlcat(first, ",", maxlen); strlcat(first, alg, maxlen); }never executed: end of block while (0); | 0 |
| 112 | else | - |
| 113 | do { if (*| TRUE | never evaluated | | FALSE | never evaluated |
last != '\0'| TRUE | never evaluated | | FALSE | never evaluated |
) strlcat(last, ",", maxlen);never executed: strlcat(last, ",", maxlen); strlcat(last, alg, maxlen); }never executed: end of block while (0); | 0 |
| 114 | } | - |
| 115 | | - |
| 116 | xasprintf(&ret, "%s%s%s", first, | - |
| 117 | (*first == '\0' || *last == '\0') ? "" : ",", last); | - |
| 118 | if (*| TRUE | never evaluated | | FALSE | never evaluated |
first != '\0'| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 119 | debug3("%s: prefer hostkeyalgs: %s", __func__, first); never executed: debug3("%s: prefer hostkeyalgs: %s", __func__, first); | 0 |
| 120 | | - |
| 121 | free(first); | - |
| 122 | free(last); | - |
| 123 | free(hostname); | - |
| 124 | free(oavail); | - |
| 125 | free_hostkeys(hostkeys); | - |
| 126 | | - |
| 127 | return never executed: return ret; ret;never executed: return ret; | 0 |
| 128 | } | - |
| 129 | | - |
| 130 | void | - |
| 131 | ssh_kex2(char *host, struct sockaddr *hostaddr, u_short port) | - |
| 132 | { | - |
| 133 | char *myproposal[PROPOSAL_MAX] = { "curve25519-sha256," "curve25519-sha256@libssh.org," "ecdh-sha2-nistp256," "ecdh-sha2-nistp384," "ecdh-sha2-nistp521," "diffie-hellman-group-exchange-sha256," "diffie-hellman-group16-sha512," "diffie-hellman-group18-sha512," "diffie-hellman-group-exchange-sha1," "diffie-hellman-group14-sha256," "diffie-hellman-group14-sha1", "ecdsa-sha2-nistp256-cert-v01@openssh.com," "ecdsa-sha2-nistp384-cert-v01@openssh.com," "ecdsa-sha2-nistp521-cert-v01@openssh.com," "ssh-ed25519-cert-v01@openssh.com," "rsa-sha2-512-cert-v01@openssh.com," "rsa-sha2-256-cert-v01@openssh.com," "ssh-rsa-cert-v01@openssh.com," "ecdsa-sha2-nistp256," "ecdsa-sha2-nistp384," "ecdsa-sha2-nistp521," "ssh-ed25519," "rsa-sha2-512," "rsa-sha2-256," "ssh-rsa", "chacha20-poly1305@openssh.com," "aes128-ctr,aes192-ctr,aes256-ctr" ",aes128-gcm@openssh.com,aes256-gcm@openssh.com", "chacha20-poly1305@openssh.com," "aes128-ctr,aes192-ctr,aes256-ctr" ",aes128-gcm@openssh.com,aes256-gcm@openssh.com", "umac-64-etm@openssh.com," "umac-128-etm@openssh.com," "hmac-sha2-256-etm@openssh.com," "hmac-sha2-512-etm@openssh.com," "hmac-sha1-etm@openssh.com," "umac-64@openssh.com," "umac-128@openssh.com," "hmac-sha2-256," "hmac-sha2-512," "hmac-sha1", "umac-64-etm@openssh.com," "umac-128-etm@openssh.com," "hmac-sha2-256-etm@openssh.com," "hmac-sha2-512-etm@openssh.com," "hmac-sha1-etm@openssh.com," "umac-64@openssh.com," "umac-128@openssh.com," "hmac-sha2-256," "hmac-sha2-512," "hmac-sha1", "none,zlib@openssh.com", "none,zlib@openssh.com", "", "" }; | - |
| 134 | char *s, *all_key; | - |
| 135 | struct kex *kex; | - |
| 136 | int r; | - |
| 137 | | - |
| 138 | xxx_host = host; | - |
| 139 | xxx_hostaddr = hostaddr; | - |
| 140 | | - |
| 141 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
s = kex_names_cat(options.kex_algorithms, "ext-info-c")) == | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 142 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 143 | ) | - |
| 144 | fatal("%s: kex_names_cat", __func__); never executed: fatal("%s: kex_names_cat", __func__); | 0 |
| 145 | myproposal[PROPOSAL_KEX_ALGS] = compat_kex_proposal(s); | - |
| 146 | myproposal[PROPOSAL_ENC_ALGS_CTOS] = | - |
| 147 | compat_cipher_proposal(options.ciphers); | - |
| 148 | myproposal[PROPOSAL_ENC_ALGS_STOC] = | - |
| 149 | compat_cipher_proposal(options.ciphers); | - |
| 150 | myproposal[PROPOSAL_COMP_ALGS_CTOS] = | - |
| 151 | myproposal[PROPOSAL_COMP_ALGS_STOC] = options.compression| TRUE | never evaluated | | FALSE | never evaluated |
? | 0 |
| 152 | "zlib@openssh.com,zlib,none" : "none,zlib@openssh.com,zlib"; | - |
| 153 | myproposal[PROPOSAL_MAC_ALGS_CTOS] = | - |
| 154 | myproposal[PROPOSAL_MAC_ALGS_STOC] = options.macs; | - |
| 155 | if (options.hostkeyalgorithms != | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 156 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 157 | ) { | - |
| 158 | all_key = sshkey_alg_list(0, 0, 1, ','); | - |
| 159 | if (kex_assemble_names(&options.hostkeyalgorithms,| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 160 | "ecdsa-sha2-nistp256-cert-v01@openssh.com," "ecdsa-sha2-nistp384-cert-v01@openssh.com," "ecdsa-sha2-nistp521-cert-v01@openssh.com," "ssh-ed25519-cert-v01@openssh.com," "rsa-sha2-512-cert-v01@openssh.com," "rsa-sha2-256-cert-v01@openssh.com," "ssh-rsa-cert-v01@openssh.com," "ecdsa-sha2-nistp256," "ecdsa-sha2-nistp384," "ecdsa-sha2-nistp521," "ssh-ed25519," "rsa-sha2-512," "rsa-sha2-256," "ssh-rsa", all_key) != 0| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 161 | fatal("%s: kex_assemble_namelist", __func__); never executed: fatal("%s: kex_assemble_namelist", __func__); | 0 |
| 162 | free(all_key); | - |
| 163 | myproposal[PROPOSAL_SERVER_HOST_KEY_ALGS] = | - |
| 164 | compat_pkalg_proposal(options.hostkeyalgorithms); | - |
| 165 | } never executed: end of block else { | 0 |
| 166 | | - |
| 167 | options.hostkeyalgorithms = xstrdup("ecdsa-sha2-nistp256-cert-v01@openssh.com," "ecdsa-sha2-nistp384-cert-v01@openssh.com," "ecdsa-sha2-nistp521-cert-v01@openssh.com," "ssh-ed25519-cert-v01@openssh.com," "rsa-sha2-512-cert-v01@openssh.com," "rsa-sha2-256-cert-v01@openssh.com," "ssh-rsa-cert-v01@openssh.com," "ecdsa-sha2-nistp256," "ecdsa-sha2-nistp384," "ecdsa-sha2-nistp521," "ssh-ed25519," "rsa-sha2-512," "rsa-sha2-256," "ssh-rsa"); | - |
| 168 | | - |
| 169 | myproposal[PROPOSAL_SERVER_HOST_KEY_ALGS] = | - |
| 170 | compat_pkalg_proposal( | - |
| 171 | order_hostkeyalgs(host, hostaddr, port)); | - |
| 172 | } never executed: end of block | 0 |
| 173 | | - |
| 174 | if (options.rekey_limit| TRUE | never evaluated | | FALSE | never evaluated |
|| options.rekey_interval| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 175 | ssh_packet_set_rekey_limits(active_state, options.rekey_limit, options.rekey_interval) never executed: ssh_packet_set_rekey_limits(active_state, options.rekey_limit, options.rekey_interval) ; | 0 |
| 176 | ; never executed: ssh_packet_set_rekey_limits(active_state, options.rekey_limit, options.rekey_interval) ; | 0 |
| 177 | | - |
| 178 | | - |
| 179 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
r = kex_setup(active_state, myproposal)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 180 | fatal("kex_setup: %s", ssh_err(r)); never executed: fatal("kex_setup: %s", ssh_err(r)); | 0 |
| 181 | kex = active_state->kex; | - |
| 182 | | - |
| 183 | kex->kex[KEX_DH_GRP1_SHA1] = kexdh_client; | - |
| 184 | kex->kex[KEX_DH_GRP14_SHA1] = kexdh_client; | - |
| 185 | kex->kex[KEX_DH_GRP14_SHA256] = kexdh_client; | - |
| 186 | kex->kex[KEX_DH_GRP16_SHA512] = kexdh_client; | - |
| 187 | kex->kex[KEX_DH_GRP18_SHA512] = kexdh_client; | - |
| 188 | kex->kex[KEX_DH_GEX_SHA1] = kexgex_client; | - |
| 189 | kex->kex[KEX_DH_GEX_SHA256] = kexgex_client; | - |
| 190 | | - |
| 191 | kex->kex[KEX_ECDH_SHA2] = kexecdh_client; | - |
| 192 | | - |
| 193 | | - |
| 194 | kex->kex[KEX_C25519_SHA256] = kexc25519_client; | - |
| 195 | kex->client_version_string=client_version_string; | - |
| 196 | kex->server_version_string=server_version_string; | - |
| 197 | kex->verify_host_key=&verify_host_key_callback; | - |
| 198 | | - |
| 199 | ssh_dispatch_run_fatal(active_state, DISPATCH_BLOCK, &kex->done); | - |
| 200 | | - |
| 201 | | - |
| 202 | myproposal[PROPOSAL_KEX_ALGS] = | - |
| 203 | compat_kex_proposal(options.kex_algorithms); | - |
| 204 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
r = kex_prop2buf(kex->my, myproposal)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 205 | fatal("kex_prop2buf: %s", ssh_err(r)); never executed: fatal("kex_prop2buf: %s", ssh_err(r)); | 0 |
| 206 | | - |
| 207 | session_id2 = kex->session_id; | - |
| 208 | session_id2_len = kex->session_id_len; | - |
| 209 | } never executed: end of block | 0 |
| 210 | | - |
| 211 | | - |
| 212 | | - |
| 213 | | - |
| 214 | | - |
| 215 | typedef struct cauthctxt Authctxt; | - |
| 216 | typedef struct cauthmethod Authmethod; | - |
| 217 | typedef struct identity Identity; | - |
| 218 | typedef struct idlist Idlist; | - |
| 219 | | - |
| 220 | struct identity { | - |
| 221 | struct { struct identity *tqe_next; struct identity **tqe_prev; } next; | - |
| 222 | int agent_fd; | - |
| 223 | struct sshkey *key; | - |
| 224 | char *filename; | - |
| 225 | int tried; | - |
| 226 | int isprivate; | - |
| 227 | int userprovided; | - |
| 228 | }; | - |
| 229 | struct idlist { struct identity *tqh_first; struct identity **tqh_last; }; | - |
| 230 | | - |
| 231 | struct cauthctxt { | - |
| 232 | const char *server_user; | - |
| 233 | const char *local_user; | - |
| 234 | const char *host; | - |
| 235 | const char *service; | - |
| 236 | struct cauthmethod *method; | - |
| 237 | sig_atomic_t success; | - |
| 238 | char *authlist; | - |
| 239 | int attempt; | - |
| 240 | | - |
| 241 | struct idlist keys; | - |
| 242 | int agent_fd; | - |
| 243 | | - |
| 244 | Sensitive *sensitive; | - |
| 245 | char *oktypes, *ktypes; | - |
| 246 | const char *active_ktype; | - |
| 247 | | - |
| 248 | int info_req_seen; | - |
| 249 | | - |
| 250 | void *methoddata; | - |
| 251 | }; | - |
| 252 | | - |
| 253 | struct cauthmethod { | - |
| 254 | char *name; | - |
| 255 | int (*userauth)(Authctxt *authctxt); | - |
| 256 | void (*cleanup)(Authctxt *authctxt); | - |
| 257 | int *enabled; | - |
| 258 | int *batch_flag; | - |
| 259 | }; | - |
| 260 | | - |
| 261 | int input_userauth_service_accept(int, u_int32_t, struct ssh *); | - |
| 262 | int input_userauth_ext_info(int, u_int32_t, struct ssh *); | - |
| 263 | int input_userauth_success(int, u_int32_t, struct ssh *); | - |
| 264 | int input_userauth_success_unexpected(int, u_int32_t, struct ssh *); | - |
| 265 | int input_userauth_failure(int, u_int32_t, struct ssh *); | - |
| 266 | int input_userauth_banner(int, u_int32_t, struct ssh *); | - |
| 267 | int input_userauth_error(int, u_int32_t, struct ssh *); | - |
| 268 | int input_userauth_info_req(int, u_int32_t, struct ssh *); | - |
| 269 | int input_userauth_pk_ok(int, u_int32_t, struct ssh *); | - |
| 270 | int input_userauth_passwd_changereq(int, u_int32_t, struct ssh *); | - |
| 271 | | - |
| 272 | int userauth_none(Authctxt *); | - |
| 273 | int userauth_pubkey(Authctxt *); | - |
| 274 | int userauth_passwd(Authctxt *); | - |
| 275 | int userauth_kbdint(Authctxt *); | - |
| 276 | int userauth_hostbased(Authctxt *); | - |
| 277 | void userauth(Authctxt *, char *); | - |
| 278 | | - |
| 279 | static int sign_and_send_pubkey(struct ssh *ssh, Authctxt *, Identity *); | - |
| 280 | static void pubkey_prepare(Authctxt *); | - |
| 281 | static void pubkey_cleanup(Authctxt *); | - |
| 282 | static void pubkey_reset(Authctxt *); | - |
| 283 | static struct sshkey *load_identity_file(Identity *); | - |
| 284 | | - |
| 285 | static Authmethod *authmethod_get(char *authlist); | - |
| 286 | static Authmethod *authmethod_lookup(const char *name); | - |
| 287 | static char *authmethods_get(void); | - |
| 288 | | - |
| 289 | Authmethod authmethods[] = { | - |
| 290 | | - |
| 291 | | - |
| 292 | | - |
| 293 | | - |
| 294 | | - |
| 295 | | - |
| 296 | | - |
| 297 | {"hostbased", | - |
| 298 | userauth_hostbased, | - |
| 299 | | - |
| 300 | ((void *)0) | - |
| 301 | , | - |
| 302 | &options.hostbased_authentication, | - |
| 303 | | - |
| 304 | ((void *)0) | - |
| 305 | }, | - |
| 306 | {"publickey", | - |
| 307 | userauth_pubkey, | - |
| 308 | | - |
| 309 | ((void *)0) | - |
| 310 | , | - |
| 311 | &options.pubkey_authentication, | - |
| 312 | | - |
| 313 | ((void *)0) | - |
| 314 | }, | - |
| 315 | {"keyboard-interactive", | - |
| 316 | userauth_kbdint, | - |
| 317 | | - |
| 318 | ((void *)0) | - |
| 319 | , | - |
| 320 | &options.kbd_interactive_authentication, | - |
| 321 | &options.batch_mode}, | - |
| 322 | {"password", | - |
| 323 | userauth_passwd, | - |
| 324 | | - |
| 325 | ((void *)0) | - |
| 326 | , | - |
| 327 | &options.password_authentication, | - |
| 328 | &options.batch_mode}, | - |
| 329 | {"none", | - |
| 330 | userauth_none, | - |
| 331 | | - |
| 332 | ((void *)0) | - |
| 333 | , | - |
| 334 | | - |
| 335 | ((void *)0) | - |
| 336 | , | - |
| 337 | | - |
| 338 | ((void *)0) | - |
| 339 | }, | - |
| 340 | { | - |
| 341 | ((void *)0) | - |
| 342 | , | - |
| 343 | ((void *)0) | - |
| 344 | , | - |
| 345 | ((void *)0) | - |
| 346 | , | - |
| 347 | ((void *)0) | - |
| 348 | , | - |
| 349 | ((void *)0) | - |
| 350 | } | - |
| 351 | }; | - |
| 352 | | - |
| 353 | void | - |
| 354 | ssh_userauth2(const char *local_user, const char *server_user, char *host, | - |
| 355 | Sensitive *sensitive) | - |
| 356 | { | - |
| 357 | struct ssh *ssh = active_state; | - |
| 358 | Authctxt authctxt; | - |
| 359 | int r; | - |
| 360 | | - |
| 361 | if (options.challenge_response_authentication| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 362 | options.kbd_interactive_authentication = 1; never executed: options.kbd_interactive_authentication = 1; | 0 |
| 363 | if (options.preferred_authentications == | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 364 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 365 | ) | - |
| 366 | options.preferred_authentications = authmethods_get(); never executed: options.preferred_authentications = authmethods_get(); | 0 |
| 367 | | - |
| 368 | | - |
| 369 | memset(&authctxt, 0, sizeof(authctxt)); | - |
| 370 | pubkey_prepare(&authctxt); | - |
| 371 | authctxt.server_user = server_user; | - |
| 372 | authctxt.local_user = local_user; | - |
| 373 | authctxt.host = host; | - |
| 374 | authctxt.service = "ssh-connection"; | - |
| 375 | authctxt.success = 0; | - |
| 376 | authctxt.method = authmethod_lookup("none"); | - |
| 377 | authctxt.authlist = | - |
| 378 | ((void *)0) | - |
| 379 | ; | - |
| 380 | authctxt.methoddata = | - |
| 381 | ((void *)0) | - |
| 382 | ; | - |
| 383 | authctxt.sensitive = sensitive; | - |
| 384 | authctxt.active_ktype = authctxt.oktypes = authctxt.ktypes = | - |
| 385 | ((void *)0) | - |
| 386 | ; | - |
| 387 | authctxt.info_req_seen = 0; | - |
| 388 | authctxt.agent_fd = -1; | - |
| 389 | if (authctxt.method == | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 390 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 391 | ) | - |
| 392 | fatal("ssh_userauth2: internal error: cannot send userauth none request"); never executed: fatal("ssh_userauth2: internal error: cannot send userauth none request"); | 0 |
| 393 | | - |
| 394 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_start(ssh, 5)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 395 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_put_cstring(ssh, "ssh-userauth")) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 396 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_send(ssh)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 397 | fatal("%s: %s", __func__, ssh_err(r)); never executed: fatal("%s: %s", __func__, ssh_err(r)); | 0 |
| 398 | | - |
| 399 | ssh->authctxt = &authctxt; | - |
| 400 | ssh_dispatch_init(ssh, &input_userauth_error); | - |
| 401 | ssh_dispatch_set(ssh, 7, &input_userauth_ext_info); | - |
| 402 | ssh_dispatch_set(ssh, 6, &input_userauth_service_accept); | - |
| 403 | ssh_dispatch_run_fatal(ssh, DISPATCH_BLOCK, &authctxt.success); | - |
| 404 | ssh->authctxt = | - |
| 405 | ((void *)0) | - |
| 406 | ; | - |
| 407 | | - |
| 408 | pubkey_cleanup(&authctxt); | - |
| 409 | ssh_dispatch_range(ssh, 50, 79, | - |
| 410 | ((void *)0) | - |
| 411 | ); | - |
| 412 | | - |
| 413 | if (!authctxt.success| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 414 | fatal("Authentication failed."); never executed: fatal("Authentication failed."); | 0 |
| 415 | debug("Authentication succeeded (%s).", authctxt.method->name); | - |
| 416 | } never executed: end of block | 0 |
| 417 | | - |
| 418 | | - |
| 419 | int | - |
| 420 | input_userauth_service_accept(int type, u_int32_t seq, struct ssh *ssh) | - |
| 421 | { | - |
| 422 | Authctxt *authctxt = ssh->authctxt; | - |
| 423 | int r; | - |
| 424 | | - |
| 425 | if (ssh_packet_remaining(ssh) > 0| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 426 | char *reply; | - |
| 427 | | - |
| 428 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_get_cstring(ssh, &reply, | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 429 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 430 | )) != 0| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 431 | goto never executed: goto out; out;never executed: goto out; | 0 |
| 432 | debug2("service_accept: %s", reply); | - |
| 433 | free(reply); | - |
| 434 | } never executed: end of block else { | 0 |
| 435 | debug2("buggy server: service_accept w/o service"); | - |
| 436 | } never executed: end of block | 0 |
| 437 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_get_end(ssh)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 438 | goto never executed: goto out; out;never executed: goto out; | 0 |
| 439 | debug("SSH2_MSG_SERVICE_ACCEPT received"); | - |
| 440 | | - |
| 441 | | - |
| 442 | userauth_none(authctxt); | - |
| 443 | | - |
| 444 | ssh_dispatch_set(ssh, 7, &input_userauth_error); | - |
| 445 | ssh_dispatch_set(ssh, 52, &input_userauth_success); | - |
| 446 | ssh_dispatch_set(ssh, 51, &input_userauth_failure); | - |
| 447 | ssh_dispatch_set(ssh, 53, &input_userauth_banner); | - |
| 448 | r = 0; | - |
| 449 | out: code before this statement never executed: out: | 0 |
| 450 | return never executed: return r; r;never executed: return r; | 0 |
| 451 | } | - |
| 452 | | - |
| 453 | | - |
| 454 | int | - |
| 455 | input_userauth_ext_info(int type, u_int32_t seqnr, struct ssh *ssh) | - |
| 456 | { | - |
| 457 | return never executed: return kex_input_ext_info(type, seqnr, ssh); kex_input_ext_info(type, seqnr, ssh);never executed: return kex_input_ext_info(type, seqnr, ssh); | 0 |
| 458 | } | - |
| 459 | | - |
| 460 | void | - |
| 461 | userauth(Authctxt *authctxt, char *authlist) | - |
| 462 | { | - |
| 463 | struct ssh *ssh = active_state; | - |
| 464 | | - |
| 465 | if (authctxt->method != | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 466 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 467 | && authctxt->method->cleanup != | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 468 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 469 | ) | - |
| 470 | authctxt->method->cleanup(authctxt); never executed: authctxt->method->cleanup(authctxt); | 0 |
| 471 | | - |
| 472 | free(authctxt->methoddata); | - |
| 473 | authctxt->methoddata = | - |
| 474 | ((void *)0) | - |
| 475 | ; | - |
| 476 | if (authlist == | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 477 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 478 | ) { | - |
| 479 | authlist = authctxt->authlist; | - |
| 480 | } never executed: end of block else { | 0 |
| 481 | free(authctxt->authlist); | - |
| 482 | authctxt->authlist = authlist; | - |
| 483 | } never executed: end of block | 0 |
| 484 | for (;;) { | - |
| 485 | Authmethod *method = authmethod_get(authlist); | - |
| 486 | if (method == | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 487 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 488 | ) | - |
| 489 | fatal("%s@%s: Permission denied (%s).", never executed: fatal("%s@%s: Permission denied (%s).", authctxt->server_user, authctxt->host, authlist); | 0 |
| 490 | authctxt->server_user, authctxt->host, authlist); never executed: fatal("%s@%s: Permission denied (%s).", authctxt->server_user, authctxt->host, authlist); | 0 |
| 491 | authctxt->method = method; | - |
| 492 | | - |
| 493 | | - |
| 494 | ssh_dispatch_range(ssh, 60, | - |
| 495 | 79, | - |
| 496 | ((void *)0) | - |
| 497 | ); | - |
| 498 | | - |
| 499 | | - |
| 500 | if (method->userauth(authctxt) != 0| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 501 | debug2("we sent a %s packet, wait for reply", method->name); | - |
| 502 | break; never executed: break; | 0 |
| 503 | } else { | - |
| 504 | debug2("we did not send a packet, disable method"); | - |
| 505 | method->enabled = | - |
| 506 | ((void *)0) | - |
| 507 | ; | - |
| 508 | } never executed: end of block | 0 |
| 509 | } | - |
| 510 | } never executed: end of block | 0 |
| 511 | | - |
| 512 | | - |
| 513 | int | - |
| 514 | input_userauth_error(int type, u_int32_t seq, struct ssh *ssh) | - |
| 515 | { | - |
| 516 | fatal("input_userauth_error: bad message during authentication: " | - |
| 517 | "type %d", type); | - |
| 518 | return never executed: return 0; 0;never executed: return 0; | 0 |
| 519 | } | - |
| 520 | | - |
| 521 | | - |
| 522 | int | - |
| 523 | input_userauth_banner(int type, u_int32_t seq, struct ssh *ssh) | - |
| 524 | { | - |
| 525 | char *msg, *lang; | - |
| 526 | u_int len; | - |
| 527 | | - |
| 528 | debug3("%s", __func__); | - |
| 529 | msg = ssh_packet_get_string(active_state, (&len)); | - |
| 530 | lang = ssh_packet_get_string(active_state, ( | - |
| 531 | ((void *)0) | - |
| 532 | )); | - |
| 533 | if (len > 0| TRUE | never evaluated | | FALSE | never evaluated |
&& options.log_level >= SYSLOG_LEVEL_INFO| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 534 | fmprintf( never executed: fmprintf( stderr , "%s", msg); | 0 |
| 535 | stderr never executed: fmprintf( stderr , "%s", msg); | 0 |
| 536 | , "%s", msg); never executed: fmprintf( stderr , "%s", msg); | 0 |
| 537 | free(msg); | - |
| 538 | free(lang); | - |
| 539 | return never executed: return 0; 0;never executed: return 0; | 0 |
| 540 | } | - |
| 541 | | - |
| 542 | | - |
| 543 | int | - |
| 544 | input_userauth_success(int type, u_int32_t seq, struct ssh *ssh) | - |
| 545 | { | - |
| 546 | Authctxt *authctxt = ssh->authctxt; | - |
| 547 | | - |
| 548 | if (authctxt == | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 549 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 550 | ) | - |
| 551 | fatal("input_userauth_success: no authentication context"); never executed: fatal("input_userauth_success: no authentication context"); | 0 |
| 552 | free(authctxt->authlist); | - |
| 553 | authctxt->authlist = | - |
| 554 | ((void *)0) | - |
| 555 | ; | - |
| 556 | if (authctxt->method != | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 557 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 558 | && authctxt->method->cleanup != | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 559 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 560 | ) | - |
| 561 | authctxt->method->cleanup(authctxt); never executed: authctxt->method->cleanup(authctxt); | 0 |
| 562 | free(authctxt->methoddata); | - |
| 563 | authctxt->methoddata = | - |
| 564 | ((void *)0) | - |
| 565 | ; | - |
| 566 | authctxt->success = 1; | - |
| 567 | return never executed: return 0; 0;never executed: return 0; | 0 |
| 568 | } | - |
| 569 | | - |
| 570 | int | - |
| 571 | input_userauth_success_unexpected(int type, u_int32_t seq, struct ssh *ssh) | - |
| 572 | { | - |
| 573 | Authctxt *authctxt = ssh->authctxt; | - |
| 574 | | - |
| 575 | if (authctxt == | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 576 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 577 | ) | - |
| 578 | fatal("%s: no authentication context", __func__); never executed: fatal("%s: no authentication context", __func__); | 0 |
| 579 | | - |
| 580 | fatal("Unexpected authentication success during %s.", | - |
| 581 | authctxt->method->name); | - |
| 582 | return never executed: return 0; 0;never executed: return 0; | 0 |
| 583 | } | - |
| 584 | | - |
| 585 | | - |
| 586 | int | - |
| 587 | input_userauth_failure(int type, u_int32_t seq, struct ssh *ssh) | - |
| 588 | { | - |
| 589 | Authctxt *authctxt = ssh->authctxt; | - |
| 590 | char *authlist = | - |
| 591 | ((void *)0) | - |
| 592 | ; | - |
| 593 | u_char partial; | - |
| 594 | int r; | - |
| 595 | | - |
| 596 | if (authctxt == | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 597 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 598 | ) | - |
| 599 | fatal("input_userauth_failure: no authentication context"); never executed: fatal("input_userauth_failure: no authentication context"); | 0 |
| 600 | | - |
| 601 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_get_cstring(ssh, &authlist, | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 602 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 603 | )) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 604 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_get_u8(ssh, &partial)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 605 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_get_end(ssh)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 606 | goto never executed: goto out; out;never executed: goto out; | 0 |
| 607 | | - |
| 608 | if (partial| TRUE | never evaluated | | FALSE | never evaluated |
!= 0| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 609 | verbose("Authenticated with partial success."); | - |
| 610 | | - |
| 611 | pubkey_reset(authctxt); | - |
| 612 | } never executed: end of block | 0 |
| 613 | debug("Authentications that can continue: %s", authlist); | - |
| 614 | | - |
| 615 | userauth(authctxt, authlist); | - |
| 616 | authlist = | - |
| 617 | ((void *)0) | - |
| 618 | ; | - |
| 619 | out: code before this statement never executed: out: | 0 |
| 620 | free(authlist); | - |
| 621 | return never executed: return 0; 0;never executed: return 0; | 0 |
| 622 | } | - |
| 623 | | - |
| 624 | | - |
| 625 | | - |
| 626 | | - |
| 627 | | - |
| 628 | static char * | - |
| 629 | format_identity(Identity *id) | - |
| 630 | { | - |
| 631 | char *fp = | - |
| 632 | ((void *)0) | - |
| 633 | , *ret = | - |
| 634 | ((void *)0) | - |
| 635 | ; | - |
| 636 | | - |
| 637 | if (id->key != | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 638 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 639 | ) { | - |
| 640 | fp = sshkey_fingerprint(id->key, options.fingerprint_hash, | - |
| 641 | SSH_FP_DEFAULT); | - |
| 642 | } never executed: end of block | 0 |
| 643 | xasprintf(&ret, "%s %s%s%s%s%s%s", | - |
| 644 | id->filename, | - |
| 645 | id->key ? sshkey_type(id->key) : "", id->key ? " " : "", | - |
| 646 | fp ? fp : "", | - |
| 647 | id->userprovided ? " explicit" : "", | - |
| 648 | (id->key && (id->key->flags & 0x0001)) ? " token" : "", | - |
| 649 | id->agent_fd != -1 ? " agent" : ""); | - |
| 650 | free(fp); | - |
| 651 | return never executed: return ret; ret;never executed: return ret; | 0 |
| 652 | } | - |
| 653 | | - |
| 654 | | - |
| 655 | int | - |
| 656 | input_userauth_pk_ok(int type, u_int32_t seq, struct ssh *ssh) | - |
| 657 | { | - |
| 658 | Authctxt *authctxt = ssh->authctxt; | - |
| 659 | struct sshkey *key = | - |
| 660 | ((void *)0) | - |
| 661 | ; | - |
| 662 | Identity *id = | - |
| 663 | ((void *)0) | - |
| 664 | ; | - |
| 665 | int pktype, found = 0, sent = 0; | - |
| 666 | size_t blen; | - |
| 667 | char *pkalg = | - |
| 668 | ((void *)0) | - |
| 669 | , *fp = | - |
| 670 | ((void *)0) | - |
| 671 | , *ident = | - |
| 672 | ((void *)0) | - |
| 673 | ; | - |
| 674 | u_char *pkblob = | - |
| 675 | ((void *)0) | - |
| 676 | ; | - |
| 677 | int r; | - |
| 678 | | - |
| 679 | if (authctxt == | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 680 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 681 | ) | - |
| 682 | fatal("input_userauth_pk_ok: no authentication context"); never executed: fatal("input_userauth_pk_ok: no authentication context"); | 0 |
| 683 | | - |
| 684 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_get_cstring(ssh, &pkalg, | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 685 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 686 | )) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 687 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_get_string(ssh, &pkblob, &blen)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 688 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_get_end(ssh)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 689 | goto never executed: goto done; done;never executed: goto done; | 0 |
| 690 | | - |
| 691 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
pktype = sshkey_type_from_name(pkalg)) == KEY_UNSPEC| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 692 | debug("%s: server sent unknown pkalg %s", __func__, pkalg); | - |
| 693 | goto never executed: goto done; done;never executed: goto done; | 0 |
| 694 | } | - |
| 695 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
r = sshkey_from_blob(pkblob, blen, &key)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 696 | debug("no key from blob. pkalg %s: %s", pkalg, ssh_err(r)); | - |
| 697 | goto never executed: goto done; done;never executed: goto done; | 0 |
| 698 | } | - |
| 699 | if (key->type != pktype| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 700 | error("input_userauth_pk_ok: type mismatch " | - |
| 701 | "for decoded key (received %d, expected %d)", | - |
| 702 | key->type, pktype); | - |
| 703 | goto never executed: goto done; done;never executed: goto done; | 0 |
| 704 | } | - |
| 705 | | - |
| 706 | | - |
| 707 | | - |
| 708 | | - |
| 709 | | - |
| 710 | | - |
| 711 | for((id) = (*(((struct idlist *)((&authctxt->keys)->tqh_last))->tqh_last)); (| TRUE | never evaluated | | FALSE | never evaluated |
id) != | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 712 | ((| TRUE | never evaluated | | FALSE | never evaluated |
| TRUE | never evaluated | | FALSE | never evaluated |
void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 713 | ; (id) = (*(((struct idlist *)((id)->next.tqe_prev))->tqh_last))) { | - |
| 714 | if (sshkey_equal(key, id->key)| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 715 | found = 1; | - |
| 716 | break; never executed: break; | 0 |
| 717 | } | - |
| 718 | } never executed: end of block | 0 |
| 719 | if (!found| TRUE | never evaluated | | FALSE | never evaluated |
|| id == | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 720 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 721 | ) { | - |
| 722 | fp = sshkey_fingerprint(key, options.fingerprint_hash, | - |
| 723 | SSH_FP_DEFAULT); | - |
| 724 | error("%s: server replied with unknown key: %s %s", __func__, | - |
| 725 | sshkey_type(key), fp == | - |
| 726 | ((void *)0) | - |
| 727 | ? "<ERROR>" : fp); | - |
| 728 | goto never executed: goto done; done;never executed: goto done; | 0 |
| 729 | } | - |
| 730 | ident = format_identity(id); | - |
| 731 | debug("Server accepts key: %s", ident); | - |
| 732 | sent = sign_and_send_pubkey(ssh, authctxt, id); | - |
| 733 | r = 0; | - |
| 734 | done: code before this statement never executed: done: | 0 |
| 735 | sshkey_free(key); | - |
| 736 | free(ident); | - |
| 737 | free(fp); | - |
| 738 | free(pkalg); | - |
| 739 | free(pkblob); | - |
| 740 | | - |
| 741 | | - |
| 742 | if (r == 0| TRUE | never evaluated | | FALSE | never evaluated |
&& sent == 0| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 743 | userauth(authctxt, never executed: userauth(authctxt, ((void *)0) ); | 0 |
| 744 | ((void *)0) never executed: userauth(authctxt, ((void *)0) ); | 0 |
| 745 | ); never executed: userauth(authctxt, ((void *)0) ); | 0 |
| 746 | return never executed: return r; r;never executed: return r; | 0 |
| 747 | } | - |
| 748 | int | - |
| 749 | userauth_none(Authctxt *authctxt) | - |
| 750 | { | - |
| 751 | struct ssh *ssh = active_state; | - |
| 752 | int r; | - |
| 753 | | - |
| 754 | | - |
| 755 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_start(ssh, 50)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 756 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_put_cstring(ssh, authctxt->server_user)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 757 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_put_cstring(ssh, authctxt->service)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 758 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_put_cstring(ssh, authctxt->method->name)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 759 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_send(ssh)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 760 | fatal("%s: %s", __func__, ssh_err(r)); never executed: fatal("%s: %s", __func__, ssh_err(r)); | 0 |
| 761 | return never executed: return 1; 1;never executed: return 1; | 0 |
| 762 | } | - |
| 763 | | - |
| 764 | int | - |
| 765 | userauth_passwd(Authctxt *authctxt) | - |
| 766 | { | - |
| 767 | struct ssh *ssh = active_state; | - |
| 768 | static int attempt = 0; | - |
| 769 | char prompt[256]; | - |
| 770 | char *password; | - |
| 771 | const char *host = options.host_key_alias| TRUE | never evaluated | | FALSE | never evaluated |
? options.host_key_alias : | 0 |
| 772 | authctxt->host; | - |
| 773 | int r; | - |
| 774 | | - |
| 775 | if (attempt++ >= options.number_of_password_prompts| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 776 | return never executed: return 0; 0;never executed: return 0; | 0 |
| 777 | | - |
| 778 | if (attempt != 1| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 779 | error("Permission denied, please try again."); never executed: error("Permission denied, please try again."); | 0 |
| 780 | | - |
| 781 | snprintf(prompt, sizeof(prompt), "%.30s@%.128s's password: ", | - |
| 782 | authctxt->server_user, host); | - |
| 783 | password = read_passphrase(prompt, 0); | - |
| 784 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_start(ssh, 50)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 785 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_put_cstring(ssh, authctxt->server_user)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 786 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_put_cstring(ssh, authctxt->service)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 787 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_put_cstring(ssh, authctxt->method->name)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 788 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_put_u8(ssh, 0)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 789 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_put_cstring(ssh, password)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 790 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_add_padding(ssh, 64)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 791 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_send(ssh)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 792 | fatal("%s: %s", __func__, ssh_err(r)); never executed: fatal("%s: %s", __func__, ssh_err(r)); | 0 |
| 793 | | - |
| 794 | if (password| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 795 | freezero(password, strlen(password)); never executed: freezero(password, strlen(password)); | 0 |
| 796 | | - |
| 797 | ssh_dispatch_set(ssh, 60, | - |
| 798 | &input_userauth_passwd_changereq); | - |
| 799 | | - |
| 800 | return never executed: return 1; 1;never executed: return 1; | 0 |
| 801 | } | - |
| 802 | | - |
| 803 | | - |
| 804 | | - |
| 805 | | - |
| 806 | | - |
| 807 | int | - |
| 808 | input_userauth_passwd_changereq(int type, u_int32_t seqnr, struct ssh *ssh) | - |
| 809 | { | - |
| 810 | Authctxt *authctxt = ssh->authctxt; | - |
| 811 | char *info = | - |
| 812 | ((void *)0) | - |
| 813 | , *lang = | - |
| 814 | ((void *)0) | - |
| 815 | , *password = | - |
| 816 | ((void *)0) | - |
| 817 | , *retype = | - |
| 818 | ((void *)0) | - |
| 819 | ; | - |
| 820 | char prompt[256]; | - |
| 821 | const char *host; | - |
| 822 | int r; | - |
| 823 | | - |
| 824 | debug2("input_userauth_passwd_changereq"); | - |
| 825 | | - |
| 826 | if (authctxt == | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 827 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 828 | ) | - |
| 829 | fatal("input_userauth_passwd_changereq: " never executed: fatal("input_userauth_passwd_changereq: " "no authentication context"); | 0 |
| 830 | "no authentication context"); never executed: fatal("input_userauth_passwd_changereq: " "no authentication context"); | 0 |
| 831 | host = options.host_key_alias| TRUE | never evaluated | | FALSE | never evaluated |
? options.host_key_alias : authctxt->host; | 0 |
| 832 | | - |
| 833 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_get_cstring(ssh, &info, | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 834 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 835 | )) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 836 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_get_cstring(ssh, &lang, | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 837 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 838 | )) != 0| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 839 | goto never executed: goto out; out;never executed: goto out; | 0 |
| 840 | if (strlen(info) > 0| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 841 | logit("%s", info); never executed: logit("%s", info); | 0 |
| 842 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_start(ssh, 50)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 843 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_put_cstring(ssh, authctxt->server_user)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 844 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_put_cstring(ssh, authctxt->service)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 845 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_put_cstring(ssh, authctxt->method->name)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 846 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_put_u8(ssh, 1)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 847 | goto never executed: goto out; out;never executed: goto out; | 0 |
| 848 | | - |
| 849 | snprintf(prompt, sizeof(prompt), | - |
| 850 | "Enter %.30s@%.128s's old password: ", | - |
| 851 | authctxt->server_user, host); | - |
| 852 | password = read_passphrase(prompt, 0); | - |
| 853 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_put_cstring(ssh, password)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 854 | goto never executed: goto out; out;never executed: goto out; | 0 |
| 855 | | - |
| 856 | freezero(password, strlen(password)); | - |
| 857 | password = | - |
| 858 | ((void *)0) | - |
| 859 | ; | - |
| 860 | while (password == | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 861 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 862 | ) { | - |
| 863 | snprintf(prompt, sizeof(prompt), | - |
| 864 | "Enter %.30s@%.128s's new password: ", | - |
| 865 | authctxt->server_user, host); | - |
| 866 | password = read_passphrase(prompt, 0x0004); | - |
| 867 | if (password == | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 868 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 869 | ) { | - |
| 870 | | - |
| 871 | r = 0; | - |
| 872 | goto never executed: goto out; out;never executed: goto out; | 0 |
| 873 | } | - |
| 874 | snprintf(prompt, sizeof(prompt), | - |
| 875 | "Retype %.30s@%.128s's new password: ", | - |
| 876 | authctxt->server_user, host); | - |
| 877 | retype = read_passphrase(prompt, 0); | - |
| 878 | if ( | - |
| 879 | __extension__ ({ size_t __s1_len, __s2_len; (__builtin_constant_p (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 880 | password| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 881 | ) && __builtin_constant_p (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 882 | retype| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 883 | ) && (__s1_len = __builtin_strlen (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 884 | password| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 885 | ), __s2_len = __builtin_strlen (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 886 | retype| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 887 | ), (!((size_t)(const void *)((| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 888 | password| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 889 | ) + 1) - (size_t)(const void *)(| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 890 | password| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 891 | ) == 1) || __s1_len >= 4) && (!((size_t)(const void *)((| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 892 | retype| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 893 | ) + 1) - (size_t)(const void *)(| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 894 | retype| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 895 | ) == 1) || __s2_len >= 4)) ? __builtin_strcmp (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 896 | password| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 897 | , | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 898 | retype| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 899 | ) : (__builtin_constant_p (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 900 | password| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 901 | ) && ((size_t)(const void *)((| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 902 | password| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 903 | ) + 1) - (size_t)(const void *)(| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 904 | password| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 905 | ) == 1) && (__s1_len = __builtin_strlen (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 906 | password| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 907 | ), __s1_len < 4) ? (__builtin_constant_p (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 908 | retype| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 909 | ) && ((size_t)(const void *)((| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 910 | retype| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 911 | ) + 1) - (size_t)(const void *)(| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 912 | retype| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 913 | ) == 1) ? __builtin_strcmp (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 914 | password| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 915 | , | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 916 | retype| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 917 | ) : (__extension__ ({ const unsigned char *__s2 = (const unsigned char *) (const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 918 | retype| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 919 | ); int __result = (((const unsigned char *) (const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 920 | password| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 921 | ))[0] - __s2[0]); if (__s1_len > 0| TRUE | never evaluated | | FALSE | never evaluated |
&& __result == 0| TRUE | never evaluated | | FALSE | never evaluated |
) { __result = (((const unsigned char *) (const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 922 | password| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 923 | ))[1] - __s2[1]); if (__s1_len > 1| TRUE | never evaluated | | FALSE | never evaluated |
&& __result == 0| TRUE | never evaluated | | FALSE | never evaluated |
) { __result = (((const unsigned char *) (const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 924 | password| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 925 | ))[2] - __s2[2]); if (__s1_len > 2| TRUE | never evaluated | | FALSE | never evaluated |
&& __result == 0| TRUE | never evaluated | | FALSE | never evaluated |
) __result = (((const unsigned char *) (const char *) (never executed: __result = (((const unsigned char *) (const char *) ( password ))[3] - __s2[3]); | 0 |
| 926 | password| TRUE | never evaluated | | FALSE | never evaluated |
never executed: __result = (((const unsigned char *) (const char *) ( password ))[3] - __s2[3]); | 0 |
| 927 | ))[3] - __s2[3]); } } __result; }))) : (__builtin_constant_p (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 928 | retype| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 929 | ) && ((size_t)(const void *)((| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 930 | retype| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 931 | ) + 1) - (size_t)(const void *)(| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 932 | retype| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 933 | ) == 1) && (__s2_len = __builtin_strlen (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 934 | retype| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 935 | ), __s2_len < 4) ? (__builtin_constant_p (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 936 | password| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 937 | ) && ((size_t)(const void *)((| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 938 | password| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 939 | ) + 1) - (size_t)(const void *)(| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 940 | password| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 941 | ) == 1) ? __builtin_strcmp (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 942 | password| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 943 | , | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 944 | retype| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 945 | ) : -(__extension__ ({ const unsigned char *__s2 = (const unsigned char *) (const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 946 | password| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 947 | ); int __result = (((const unsigned char *) (const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 948 | retype| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 949 | ))[0] - __s2[0]); if (__s2_len > 0| TRUE | never evaluated | | FALSE | never evaluated |
&& __result == 0| TRUE | never evaluated | | FALSE | never evaluated |
) { __result = (((const unsigned char *) (const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 950 | retype| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 951 | ))[1] - __s2[1]); if (__s2_len > 1| TRUE | never evaluated | | FALSE | never evaluated |
&& __result == 0| TRUE | never evaluated | | FALSE | never evaluated |
) { __result = (((const unsigned char *) (const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 952 | retype| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 953 | ))[2] - __s2[2]); if (__s2_len > 2| TRUE | never evaluated | | FALSE | never evaluated |
&& __result == 0| TRUE | never evaluated | | FALSE | never evaluated |
) __result = (((const unsigned char *) (const char *) (never executed: __result = (((const unsigned char *) (const char *) ( retype ))[3] - __s2[3]); | 0 |
| 954 | retype| TRUE | never evaluated | | FALSE | never evaluated |
never executed: __result = (((const unsigned char *) (const char *) ( retype ))[3] - __s2[3]); | 0 |
| 955 | ))[3] - __s2[3]); } } __result; }))) : __builtin_strcmp (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 956 | password| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 957 | , | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 958 | retype| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 959 | )))); }) | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 960 | != 0| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 961 | freezero(password, strlen(password)); | - |
| 962 | logit("Mismatch; try again, EOF to quit."); | - |
| 963 | password = | - |
| 964 | ((void *)0) | - |
| 965 | ; | - |
| 966 | } never executed: end of block | 0 |
| 967 | freezero(retype, strlen(retype)); | - |
| 968 | } never executed: end of block | 0 |
| 969 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_put_cstring(ssh, password)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 970 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_add_padding(ssh, 64)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 971 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_send(ssh)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 972 | goto never executed: goto out; out;never executed: goto out; | 0 |
| 973 | | - |
| 974 | ssh_dispatch_set(ssh, 60, | - |
| 975 | &input_userauth_passwd_changereq); | - |
| 976 | r = 0; | - |
| 977 | out: code before this statement never executed: out: | 0 |
| 978 | if (password| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 979 | freezero(password, strlen(password)); never executed: freezero(password, strlen(password)); | 0 |
| 980 | free(info); | - |
| 981 | free(lang); | - |
| 982 | return never executed: return r; r;never executed: return r; | 0 |
| 983 | } | - |
| 984 | static char * | - |
| 985 | key_sig_algorithm(struct ssh *ssh, const struct sshkey *key) | - |
| 986 | { | - |
| 987 | char *allowed, *oallowed, *cp, *tmp, *alg = | - |
| 988 | ((void *)0) | - |
| 989 | ; | - |
| 990 | | - |
| 991 | | - |
| 992 | | - |
| 993 | | - |
| 994 | | - |
| 995 | | - |
| 996 | if (ssh == | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 997 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 998 | || ssh->kex->server_sig_algs == | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 999 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1000 | || | - |
| 1001 | (key->type != KEY_RSA| TRUE | never evaluated | | FALSE | never evaluated |
&& key->type != KEY_RSA_CERT| TRUE | never evaluated | | FALSE | never evaluated |
)) { | 0 |
| 1002 | | - |
| 1003 | return never executed: return match_list(sshkey_ssh_name(key), options.pubkey_key_types, ((void *)0) ); match_list(sshkey_ssh_name(key),never executed: return match_list(sshkey_ssh_name(key), options.pubkey_key_types, ((void *)0) ); | 0 |
| 1004 | options.pubkey_key_types, never executed: return match_list(sshkey_ssh_name(key), options.pubkey_key_types, ((void *)0) ); | 0 |
| 1005 | ((void *)0) never executed: return match_list(sshkey_ssh_name(key), options.pubkey_key_types, ((void *)0) ); | 0 |
| 1006 | ); never executed: return match_list(sshkey_ssh_name(key), options.pubkey_key_types, ((void *)0) ); | 0 |
| 1007 | } | - |
| 1008 | | - |
| 1009 | | - |
| 1010 | | - |
| 1011 | | - |
| 1012 | | - |
| 1013 | | - |
| 1014 | | - |
| 1015 | oallowed = allowed = xstrdup(options.pubkey_key_types); | - |
| 1016 | while ((| TRUE | never evaluated | | FALSE | never evaluated |
cp = | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1017 | __extension__ ({ char __r0, __r1, __r2; (__builtin_constant_p (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1018 | ","| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1019 | ) && ((size_t)(const void *)((| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1020 | ","| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1021 | ) + 1) - (size_t)(const void *)(| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1022 | ","| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1023 | ) == 1) && (__r0 = ((const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1024 | ","| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1025 | ))[0], ((const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1026 | ","| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1027 | ))[0] != '\0') ? ((__r1 = ((const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1028 | ","| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1029 | ))[1], ((const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1030 | ","| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1031 | ))[1] == '\0') ? __strsep_1c (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1032 | &allowed| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1033 | , __r0) : ((__r2 = ((const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1034 | ","| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1035 | ))[2], __r2 == '\0') ? __strsep_2c (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1036 | &allowed| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1037 | , __r0, __r1) : (((const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1038 | ","| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1039 | ))[3] == '\0' ? __strsep_3c (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1040 | &allowed| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1041 | , __r0, __r1, __r2) : __strsep_g (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1042 | &allowed| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1043 | , | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1044 | ","| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1045 | )))) : __strsep_g (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1046 | &allowed| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1047 | , | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1048 | ","| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1049 | )); })| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1050 | ) != | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1051 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1052 | ) { | - |
| 1053 | if (sshkey_type_from_name(cp) != key->type| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 1054 | continue; never executed: continue; | 0 |
| 1055 | tmp = match_list(sshkey_sigalg_by_name(cp), ssh->kex->server_sig_algs, | - |
| 1056 | ((void *)0) | - |
| 1057 | ); | - |
| 1058 | if (tmp != | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1059 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1060 | ) | - |
| 1061 | alg = xstrdup(cp); never executed: alg = xstrdup(cp); | 0 |
| 1062 | free(tmp); | - |
| 1063 | if (alg != | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1064 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1065 | ) | - |
| 1066 | break; never executed: break; | 0 |
| 1067 | } never executed: end of block | 0 |
| 1068 | free(oallowed); | - |
| 1069 | return never executed: return alg; alg;never executed: return alg; | 0 |
| 1070 | } | - |
| 1071 | | - |
| 1072 | static int | - |
| 1073 | identity_sign(struct identity *id, u_char **sigp, size_t *lenp, | - |
| 1074 | const u_char *data, size_t datalen, u_int compat, const char *alg) | - |
| 1075 | { | - |
| 1076 | struct sshkey *prv; | - |
| 1077 | int r; | - |
| 1078 | | - |
| 1079 | | - |
| 1080 | if (id->key != | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1081 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1082 | && id->agent_fd != -1| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 1083 | return never executed: return ssh_agent_sign(id->agent_fd, id->key, sigp, lenp, data, datalen, alg, compat); ssh_agent_sign(id->agent_fd, id->key, sigp, lenp,never executed: return ssh_agent_sign(id->agent_fd, id->key, sigp, lenp, data, datalen, alg, compat); | 0 |
| 1084 | data, datalen, alg, compat); never executed: return ssh_agent_sign(id->agent_fd, id->key, sigp, lenp, data, datalen, alg, compat); | 0 |
| 1085 | } | - |
| 1086 | | - |
| 1087 | | - |
| 1088 | | - |
| 1089 | | - |
| 1090 | | - |
| 1091 | if (id->key != | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1092 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1093 | && | - |
| 1094 | (id->isprivate| TRUE | never evaluated | | FALSE | never evaluated |
|| (| TRUE | never evaluated | | FALSE | never evaluated |
id->key->flags & 0x0001)| TRUE | never evaluated | | FALSE | never evaluated |
)) { | 0 |
| 1095 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
r = sshkey_sign(id->key, sigp, lenp, data, datalen,| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1096 | alg, compat)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 1097 | return never executed: return r; r;never executed: return r; | 0 |
| 1098 | | - |
| 1099 | | - |
| 1100 | | - |
| 1101 | | - |
| 1102 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
r = sshkey_check_sigtype(*sigp, *lenp, alg)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 1103 | return never executed: return r; r;never executed: return r; | 0 |
| 1104 | return never executed: return 0; 0;never executed: return 0; | 0 |
| 1105 | } | - |
| 1106 | | - |
| 1107 | | - |
| 1108 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
prv = load_identity_file(id)) == | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1109 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1110 | ) | - |
| 1111 | return never executed: return -46; -46;never executed: return -46; | 0 |
| 1112 | if (id->key != | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1113 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1114 | && !sshkey_equal_public(prv, id->key)| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 1115 | error("%s: private key %s contents do not match public", | - |
| 1116 | __func__, id->filename); | - |
| 1117 | return never executed: return -46; -46;never executed: return -46; | 0 |
| 1118 | } | - |
| 1119 | r = sshkey_sign(prv, sigp, lenp, data, datalen, alg, compat); | - |
| 1120 | sshkey_free(prv); | - |
| 1121 | return never executed: return r; r;never executed: return r; | 0 |
| 1122 | } | - |
| 1123 | | - |
| 1124 | static int | - |
| 1125 | id_filename_matches(Identity *id, Identity *private_id) | - |
| 1126 | { | - |
| 1127 | const char *suffixes[] = { ".pub", "-cert.pub", | - |
| 1128 | ((void *)0) | - |
| 1129 | }; | - |
| 1130 | size_t len = strlen(id->filename), plen = strlen(private_id->filename); | - |
| 1131 | size_t i, slen; | - |
| 1132 | | - |
| 1133 | if ( | - |
| 1134 | __extension__ ({ size_t __s1_len, __s2_len; (__builtin_constant_p (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1135 | id->filename| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1136 | ) && __builtin_constant_p (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1137 | private_id->filename| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1138 | ) && (__s1_len = __builtin_strlen (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1139 | id->filename| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1140 | ), __s2_len = __builtin_strlen (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1141 | private_id->filename| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1142 | ), (!((size_t)(const void *)((| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1143 | id->filename| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1144 | ) + 1) - (size_t)(const void *)(| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1145 | id->filename| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1146 | ) == 1) || __s1_len >= 4) && (!((size_t)(const void *)((| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1147 | private_id->filename| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1148 | ) + 1) - (size_t)(const void *)(| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1149 | private_id->filename| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1150 | ) == 1) || __s2_len >= 4)) ? __builtin_strcmp (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1151 | id->filename| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1152 | , | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1153 | private_id->filename| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1154 | ) : (__builtin_constant_p (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1155 | id->filename| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1156 | ) && ((size_t)(const void *)((| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1157 | id->filename| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1158 | ) + 1) - (size_t)(const void *)(| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1159 | id->filename| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1160 | ) == 1) && (__s1_len = __builtin_strlen (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1161 | id->filename| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1162 | ), __s1_len < 4) ? (__builtin_constant_p (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1163 | private_id->filename| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1164 | ) && ((size_t)(const void *)((| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1165 | private_id->filename| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1166 | ) + 1) - (size_t)(const void *)(| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1167 | private_id->filename| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1168 | ) == 1) ? __builtin_strcmp (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1169 | id->filename| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1170 | , | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1171 | private_id->filename| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1172 | ) : (__extension__ ({ const unsigned char *__s2 = (const unsigned char *) (const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1173 | private_id->filename| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1174 | ); int __result = (((const unsigned char *) (const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1175 | id->filename| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1176 | ))[0] - __s2[0]); if (__s1_len > 0| TRUE | never evaluated | | FALSE | never evaluated |
&& __result == 0| TRUE | never evaluated | | FALSE | never evaluated |
) { __result = (((const unsigned char *) (const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1177 | id->filename| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1178 | ))[1] - __s2[1]); if (__s1_len > 1| TRUE | never evaluated | | FALSE | never evaluated |
&& __result == 0| TRUE | never evaluated | | FALSE | never evaluated |
) { __result = (((const unsigned char *) (const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1179 | id->filename| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1180 | ))[2] - __s2[2]); if (__s1_len > 2| TRUE | never evaluated | | FALSE | never evaluated |
&& __result == 0| TRUE | never evaluated | | FALSE | never evaluated |
) __result = (((const unsigned char *) (const char *) (never executed: __result = (((const unsigned char *) (const char *) ( id->filename ))[3] - __s2[3]); | 0 |
| 1181 | id->filename| TRUE | never evaluated | | FALSE | never evaluated |
never executed: __result = (((const unsigned char *) (const char *) ( id->filename ))[3] - __s2[3]); | 0 |
| 1182 | ))[3] - __s2[3]); } } __result; }))) : (__builtin_constant_p (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1183 | private_id->filename| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1184 | ) && ((size_t)(const void *)((| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1185 | private_id->filename| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1186 | ) + 1) - (size_t)(const void *)(| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1187 | private_id->filename| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1188 | ) == 1) && (__s2_len = __builtin_strlen (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1189 | private_id->filename| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1190 | ), __s2_len < 4) ? (__builtin_constant_p (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1191 | id->filename| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1192 | ) && ((size_t)(const void *)((| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1193 | id->filename| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1194 | ) + 1) - (size_t)(const void *)(| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1195 | id->filename| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1196 | ) == 1) ? __builtin_strcmp (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1197 | id->filename| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1198 | , | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1199 | private_id->filename| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1200 | ) : -(__extension__ ({ const unsigned char *__s2 = (const unsigned char *) (const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1201 | id->filename| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1202 | ); int __result = (((const unsigned char *) (const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1203 | private_id->filename| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1204 | ))[0] - __s2[0]); if (__s2_len > 0| TRUE | never evaluated | | FALSE | never evaluated |
&& __result == 0| TRUE | never evaluated | | FALSE | never evaluated |
) { __result = (((const unsigned char *) (const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1205 | private_id->filename| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1206 | ))[1] - __s2[1]); if (__s2_len > 1| TRUE | never evaluated | | FALSE | never evaluated |
&& __result == 0| TRUE | never evaluated | | FALSE | never evaluated |
) { __result = (((const unsigned char *) (const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1207 | private_id->filename| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1208 | ))[2] - __s2[2]); if (__s2_len > 2| TRUE | never evaluated | | FALSE | never evaluated |
&& __result == 0| TRUE | never evaluated | | FALSE | never evaluated |
) __result = (((const unsigned char *) (const char *) (never executed: __result = (((const unsigned char *) (const char *) ( private_id->filename ))[3] - __s2[3]); | 0 |
| 1209 | private_id->filename| TRUE | never evaluated | | FALSE | never evaluated |
never executed: __result = (((const unsigned char *) (const char *) ( private_id->filename ))[3] - __s2[3]); | 0 |
| 1210 | ))[3] - __s2[3]); } } __result; }))) : __builtin_strcmp (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1211 | id->filename| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1212 | , | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1213 | private_id->filename| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1214 | )))); }) | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1215 | == 0| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 1216 | return never executed: return 1; 1;never executed: return 1; | 0 |
| 1217 | for (i = 0; suffixes[i]| TRUE | never evaluated | | FALSE | never evaluated |
; i++) { | 0 |
| 1218 | slen = strlen(suffixes[i]); | - |
| 1219 | if (len > slen| TRUE | never evaluated | | FALSE | never evaluated |
&& plen == len - slen| TRUE | never evaluated | | FALSE | never evaluated |
&& | 0 |
| 1220 | | - |
| 1221 | __extension__ ({ size_t __s1_len, __s2_len; (__builtin_constant_p (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1222 | id->filename + (len - slen)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1223 | ) && __builtin_constant_p (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1224 | suffixes[i]| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1225 | ) && (__s1_len = __builtin_strlen (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1226 | id->filename + (len - slen)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1227 | ), __s2_len = __builtin_strlen (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1228 | suffixes[i]| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1229 | ), (!((size_t)(const void *)((| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1230 | id->filename + (len - slen)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1231 | ) + 1) - (size_t)(const void *)(| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1232 | id->filename + (len - slen)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1233 | ) == 1) || __s1_len >= 4) && (!((size_t)(const void *)((| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1234 | suffixes[i]| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1235 | ) + 1) - (size_t)(const void *)(| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1236 | suffixes[i]| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1237 | ) == 1) || __s2_len >= 4)) ? __builtin_strcmp (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1238 | id->filename + (len - slen)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1239 | , | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1240 | suffixes[i]| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1241 | ) : (__builtin_constant_p (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1242 | id->filename + (len - slen)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1243 | ) && ((size_t)(const void *)((| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1244 | id->filename + (len - slen)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1245 | ) + 1) - (size_t)(const void *)(| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1246 | id->filename + (len - slen)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1247 | ) == 1) && (__s1_len = __builtin_strlen (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1248 | id->filename + (len - slen)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1249 | ), __s1_len < 4) ? (__builtin_constant_p (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1250 | suffixes[i]| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1251 | ) && ((size_t)(const void *)((| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1252 | suffixes[i]| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1253 | ) + 1) - (size_t)(const void *)(| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1254 | suffixes[i]| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1255 | ) == 1) ? __builtin_strcmp (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1256 | id->filename + (len - slen)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1257 | , | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1258 | suffixes[i]| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1259 | ) : (__extension__ ({ const unsigned char *__s2 = (const unsigned char *) (const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1260 | suffixes[i]| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1261 | ); int __result = (((const unsigned char *) (const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1262 | id->filename + (len - slen)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1263 | ))[0] - __s2[0]); if (__s1_len > 0| TRUE | never evaluated | | FALSE | never evaluated |
&& __result == 0| TRUE | never evaluated | | FALSE | never evaluated |
) { __result = (((const unsigned char *) (const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1264 | id->filename + (len - slen)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1265 | ))[1] - __s2[1]); if (__s1_len > 1| TRUE | never evaluated | | FALSE | never evaluated |
&& __result == 0| TRUE | never evaluated | | FALSE | never evaluated |
) { __result = (((const unsigned char *) (const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1266 | id->filename + (len - slen)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1267 | ))[2] - __s2[2]); if (__s1_len > 2| TRUE | never evaluated | | FALSE | never evaluated |
&& __result == 0| TRUE | never evaluated | | FALSE | never evaluated |
) __result = (((const unsigned char *) (const char *) (never executed: __result = (((const unsigned char *) (const char *) ( id->filename + (len - slen) ))[3] - __s2[3]); | 0 |
| 1268 | id->filename + (len - slen)| TRUE | never evaluated | | FALSE | never evaluated |
never executed: __result = (((const unsigned char *) (const char *) ( id->filename + (len - slen) ))[3] - __s2[3]); | 0 |
| 1269 | ))[3] - __s2[3]); } } __result; }))) : (__builtin_constant_p (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1270 | suffixes[i]| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1271 | ) && ((size_t)(const void *)((| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1272 | suffixes[i]| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1273 | ) + 1) - (size_t)(const void *)(| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1274 | suffixes[i]| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1275 | ) == 1) && (__s2_len = __builtin_strlen (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1276 | suffixes[i]| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1277 | ), __s2_len < 4) ? (__builtin_constant_p (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1278 | id->filename + (len - slen)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1279 | ) && ((size_t)(const void *)((| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1280 | id->filename + (len - slen)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1281 | ) + 1) - (size_t)(const void *)(| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1282 | id->filename + (len - slen)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1283 | ) == 1) ? __builtin_strcmp (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1284 | id->filename + (len - slen)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1285 | , | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1286 | suffixes[i]| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1287 | ) : -(__extension__ ({ const unsigned char *__s2 = (const unsigned char *) (const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1288 | id->filename + (len - slen)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1289 | ); int __result = (((const unsigned char *) (const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1290 | suffixes[i]| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1291 | ))[0] - __s2[0]); if (__s2_len > 0| TRUE | never evaluated | | FALSE | never evaluated |
&& __result == 0| TRUE | never evaluated | | FALSE | never evaluated |
) { __result = (((const unsigned char *) (const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1292 | suffixes[i]| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1293 | ))[1] - __s2[1]); if (__s2_len > 1| TRUE | never evaluated | | FALSE | never evaluated |
&& __result == 0| TRUE | never evaluated | | FALSE | never evaluated |
) { __result = (((const unsigned char *) (const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1294 | suffixes[i]| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1295 | ))[2] - __s2[2]); if (__s2_len > 2| TRUE | never evaluated | | FALSE | never evaluated |
&& __result == 0| TRUE | never evaluated | | FALSE | never evaluated |
) __result = (((const unsigned char *) (const char *) (never executed: __result = (((const unsigned char *) (const char *) ( suffixes[i] ))[3] - __s2[3]); | 0 |
| 1296 | suffixes[i]| TRUE | never evaluated | | FALSE | never evaluated |
never executed: __result = (((const unsigned char *) (const char *) ( suffixes[i] ))[3] - __s2[3]); | 0 |
| 1297 | ))[3] - __s2[3]); } } __result; }))) : __builtin_strcmp (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1298 | id->filename + (len - slen)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1299 | , | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1300 | suffixes[i]| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1301 | )))); }) | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1302 | == 0| TRUE | never evaluated | | FALSE | never evaluated |
&& | 0 |
| 1303 | memcmp(id->filename, private_id->filename, plen) == 0| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 1304 | return never executed: return 1; 1;never executed: return 1; | 0 |
| 1305 | } never executed: end of block | 0 |
| 1306 | return never executed: return 0; 0;never executed: return 0; | 0 |
| 1307 | } | - |
| 1308 | | - |
| 1309 | static int | - |
| 1310 | sign_and_send_pubkey(struct ssh *ssh, Authctxt *authctxt, Identity *id) | - |
| 1311 | { | - |
| 1312 | struct sshbuf *b = | - |
| 1313 | ((void *)0) | - |
| 1314 | ; | - |
| 1315 | Identity *private_id, *sign_id = | - |
| 1316 | ((void *)0) | - |
| 1317 | ; | - |
| 1318 | u_char *signature = | - |
| 1319 | ((void *)0) | - |
| 1320 | ; | - |
| 1321 | size_t slen = 0, skip = 0; | - |
| 1322 | int r, fallback_sigtype, sent = 0; | - |
| 1323 | char *alg = | - |
| 1324 | ((void *)0) | - |
| 1325 | , *fp = | - |
| 1326 | ((void *)0) | - |
| 1327 | ; | - |
| 1328 | const char *loc = ""; | - |
| 1329 | | - |
| 1330 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
fp = sshkey_fingerprint(id->key, options.fingerprint_hash,| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1331 | SSH_FP_DEFAULT)) == | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1332 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1333 | ) | - |
| 1334 | return never executed: return 0; 0;never executed: return 0; | 0 |
| 1335 | | - |
| 1336 | debug3("%s: %s %s", __func__, sshkey_type(id->key), fp); | - |
| 1337 | if (sshkey_is_cert(id->key)| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 1338 | for((private_id) = ((&authctxt->keys)->tqh_first); (| TRUE | never evaluated | | FALSE | never evaluated |
private_id) != | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1339 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1340 | ; (private_id) = ((private_id)->next.tqe_next)) { | - |
| 1341 | if (sshkey_equal_public(id->key, private_id->key)| TRUE | never evaluated | | FALSE | never evaluated |
&& | 0 |
| 1342 | id->key->type != private_id->key->type| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 1343 | sign_id = private_id; | - |
| 1344 | break; never executed: break; | 0 |
| 1345 | } | - |
| 1346 | } never executed: end of block | 0 |
| 1347 | | - |
| 1348 | | - |
| 1349 | | - |
| 1350 | | - |
| 1351 | | - |
| 1352 | | - |
| 1353 | | - |
| 1354 | if (sign_id == | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1355 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1356 | && | - |
| 1357 | !id->isprivate| TRUE | never evaluated | | FALSE | never evaluated |
&& id->agent_fd == -1| TRUE | never evaluated | | FALSE | never evaluated |
&& | 0 |
| 1358 | (| TRUE | never evaluated | | FALSE | never evaluated |
id->key->flags & 0x0001) == 0| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 1359 | for((private_id) = ((&authctxt->keys)->tqh_first); (| TRUE | never evaluated | | FALSE | never evaluated |
private_id) != | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1360 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1361 | ; (private_id) = ((private_id)->next.tqe_next)) { | - |
| 1362 | if (private_id->key == | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1363 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1364 | && | - |
| 1365 | id_filename_matches(id, private_id)| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 1366 | sign_id = private_id; | - |
| 1367 | break; never executed: break; | 0 |
| 1368 | } | - |
| 1369 | } never executed: end of block | 0 |
| 1370 | } never executed: end of block | 0 |
| 1371 | if (sign_id != | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1372 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1373 | ) { | - |
| 1374 | debug2("%s: using private key \"%s\"%s for " | - |
| 1375 | "certificate", __func__, id->filename, | - |
| 1376 | id->agent_fd != -1 ? " from agent" : ""); | - |
| 1377 | } never executed: end of block else { | 0 |
| 1378 | debug("%s: no separate private key for certificate " | - |
| 1379 | "\"%s\"", __func__, id->filename); | - |
| 1380 | } never executed: end of block | 0 |
| 1381 | } | - |
| 1382 | | - |
| 1383 | | - |
| 1384 | | - |
| 1385 | | - |
| 1386 | | - |
| 1387 | if (sign_id == | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1388 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1389 | ) | - |
| 1390 | sign_id = id; never executed: sign_id = id; | 0 |
| 1391 | | - |
| 1392 | | - |
| 1393 | for (fallback_sigtype = 0; fallback_sigtype <= 1| TRUE | never evaluated | | FALSE | never evaluated |
; fallback_sigtype++) { | 0 |
| 1394 | free(alg); | - |
| 1395 | slen = 0; | - |
| 1396 | signature = | - |
| 1397 | ((void *)0) | - |
| 1398 | ; | - |
| 1399 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
alg = key_sig_algorithm(fallback_sigtype ? | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1400 | ((void *)0) | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1401 | : ssh,| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1402 | id->key)) == | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1403 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1404 | ) { | - |
| 1405 | error("%s: no mutual signature supported", __func__); | - |
| 1406 | goto never executed: goto out; out;never executed: goto out; | 0 |
| 1407 | } | - |
| 1408 | debug3("%s: signing using %s", __func__, alg); | - |
| 1409 | | - |
| 1410 | sshbuf_free(b); | - |
| 1411 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
b = sshbuf_new()) == | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1412 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1413 | ) | - |
| 1414 | fatal("%s: sshbuf_new failed", __func__); never executed: fatal("%s: sshbuf_new failed", __func__); | 0 |
| 1415 | if (datafellows & 0x00000010| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 1416 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
r = sshbuf_put(b, session_id2,| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1417 | session_id2_len)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 1418 | fatal("%s: sshbuf_put: %s", | - |
| 1419 | __func__, ssh_err(r)); | - |
| 1420 | } never executed: end of block | 0 |
| 1421 | } never executed: end of block else { | 0 |
| 1422 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
r = sshbuf_put_string(b, session_id2,| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1423 | session_id2_len)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 1424 | fatal("%s: sshbuf_put_string: %s", | - |
| 1425 | __func__, ssh_err(r)); | - |
| 1426 | } never executed: end of block | 0 |
| 1427 | } never executed: end of block | 0 |
| 1428 | skip = sshbuf_len(b); | - |
| 1429 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
r = sshbuf_put_u8(b, 50)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 1430 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshbuf_put_cstring(b, authctxt->server_user)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 1431 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshbuf_put_cstring(b, authctxt->service)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 1432 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshbuf_put_cstring(b, authctxt->method->name)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 1433 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshbuf_put_u8(b, 1)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 1434 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshbuf_put_cstring(b, alg)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 1435 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshkey_puts(id->key, b)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 1436 | fatal("%s: assemble signed data: %s", | - |
| 1437 | __func__, ssh_err(r)); | - |
| 1438 | } never executed: end of block | 0 |
| 1439 | | - |
| 1440 | | - |
| 1441 | r = identity_sign(sign_id, &signature, &slen, | - |
| 1442 | sshbuf_ptr(b), sshbuf_len(b), datafellows, alg); | - |
| 1443 | if (r == 0| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 1444 | break; never executed: break; | 0 |
| 1445 | else if (r == -46| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 1446 | goto never executed: goto out; out;never executed: goto out; | 0 |
| 1447 | else if (r == -58| TRUE | never evaluated | | FALSE | never evaluated |
&& | 0 |
| 1448 | !fallback_sigtype| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 1449 | if (sign_id->agent_fd != -1| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 1450 | loc = "agent "; never executed: loc = "agent "; | 0 |
| 1451 | else if ((| TRUE | never evaluated | | FALSE | never evaluated |
sign_id->key->flags & 0x0001) != 0| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 1452 | loc = "token "; never executed: loc = "token "; | 0 |
| 1453 | logit("%skey %s %s returned incorrect signature type", | - |
| 1454 | loc, sshkey_type(id->key), fp); | - |
| 1455 | continue; never executed: continue; | 0 |
| 1456 | } | - |
| 1457 | error("%s: signing failed: %s", __func__, ssh_err(r)); | - |
| 1458 | goto never executed: goto out; out;never executed: goto out; | 0 |
| 1459 | } | - |
| 1460 | if (slen == 0| TRUE | never evaluated | | FALSE | never evaluated |
|| signature == | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1461 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1462 | ) | - |
| 1463 | fatal("%s: no signature", __func__); never executed: fatal("%s: no signature", __func__); | 0 |
| 1464 | | - |
| 1465 | | - |
| 1466 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
r = sshbuf_put_string(b, signature, slen)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 1467 | fatal("%s: append signature: %s", __func__, ssh_err(r)); never executed: fatal("%s: append signature: %s", __func__, ssh_err(r)); | 0 |
| 1468 | | - |
| 1469 | | - |
| 1470 | | - |
| 1471 | | - |
| 1472 | | - |
| 1473 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
r = sshbuf_consume(b, skip + 1)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 1474 | fatal("%s: consume: %s", __func__, ssh_err(r)); never executed: fatal("%s: consume: %s", __func__, ssh_err(r)); | 0 |
| 1475 | | - |
| 1476 | | - |
| 1477 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_start(ssh, 50)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 1478 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_putb(ssh, b)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 1479 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_send(ssh)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 1480 | fatal("%s: enqueue request: %s", __func__, ssh_err(r)); never executed: fatal("%s: enqueue request: %s", __func__, ssh_err(r)); | 0 |
| 1481 | | - |
| 1482 | | - |
| 1483 | sent = 1; | - |
| 1484 | | - |
| 1485 | out: code before this statement never executed: out: | 0 |
| 1486 | free(fp); | - |
| 1487 | free(alg); | - |
| 1488 | sshbuf_free(b); | - |
| 1489 | freezero(signature, slen); | - |
| 1490 | return never executed: return sent; sent;never executed: return sent; | 0 |
| 1491 | } | - |
| 1492 | | - |
| 1493 | static int | - |
| 1494 | send_pubkey_test(struct ssh *ssh, Authctxt *authctxt, Identity *id) | - |
| 1495 | { | - |
| 1496 | u_char *blob = | - |
| 1497 | ((void *)0) | - |
| 1498 | ; | - |
| 1499 | char *alg = | - |
| 1500 | ((void *)0) | - |
| 1501 | ; | - |
| 1502 | size_t bloblen; | - |
| 1503 | u_int have_sig = 0; | - |
| 1504 | int sent = 0, r; | - |
| 1505 | | - |
| 1506 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
alg = key_sig_algorithm(ssh, id->key)) == | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1507 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1508 | ) { | - |
| 1509 | debug("%s: no mutual signature algorithm", __func__); | - |
| 1510 | goto never executed: goto out; out;never executed: goto out; | 0 |
| 1511 | } | - |
| 1512 | | - |
| 1513 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
r = sshkey_to_blob(id->key, &blob, &bloblen)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 1514 | | - |
| 1515 | debug3("%s: cannot handle key", __func__); | - |
| 1516 | goto never executed: goto out; out;never executed: goto out; | 0 |
| 1517 | } | - |
| 1518 | | - |
| 1519 | ssh_dispatch_set(ssh, 60, &input_userauth_pk_ok); | - |
| 1520 | | - |
| 1521 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_start(ssh, 50)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 1522 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_put_cstring(ssh, authctxt->server_user)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 1523 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_put_cstring(ssh, authctxt->service)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 1524 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_put_cstring(ssh, authctxt->method->name)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 1525 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_put_u8(ssh, have_sig)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 1526 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_put_cstring(ssh, alg)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 1527 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_put_string(ssh, blob, bloblen)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 1528 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_send(ssh)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 1529 | fatal("%s: %s", __func__, ssh_err(r)); never executed: fatal("%s: %s", __func__, ssh_err(r)); | 0 |
| 1530 | sent = 1; | - |
| 1531 | | - |
| 1532 | out: code before this statement never executed: out: | 0 |
| 1533 | free(alg); | - |
| 1534 | free(blob); | - |
| 1535 | return never executed: return sent; sent;never executed: return sent; | 0 |
| 1536 | } | - |
| 1537 | | - |
| 1538 | static struct sshkey * | - |
| 1539 | load_identity_file(Identity *id) | - |
| 1540 | { | - |
| 1541 | struct sshkey *private = | - |
| 1542 | ((void *)0) | - |
| 1543 | ; | - |
| 1544 | char prompt[300], *passphrase, *comment; | - |
| 1545 | int r, perm_ok = 0, quit = 0, i; | - |
| 1546 | struct stat st; | - |
| 1547 | | - |
| 1548 | if (stat(id->filename, &st) < 0| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 1549 | (id->userprovided ? logit : debug3)("no such identity: %s: %s", | - |
| 1550 | id->filename, strerror( | - |
| 1551 | (*__errno_location ()) | - |
| 1552 | )); | - |
| 1553 | return never executed: return ((void *)0) ; never executed: return ((void *)0) ; | 0 |
| 1554 | ((void *)0) never executed: return ((void *)0) ; | 0 |
| 1555 | ; never executed: return ((void *)0) ; | 0 |
| 1556 | } | - |
| 1557 | snprintf(prompt, sizeof prompt, | - |
| 1558 | "Enter passphrase for key '%.100s': ", id->filename); | - |
| 1559 | for (i = 0; i <= options.number_of_password_prompts| TRUE | never evaluated | | FALSE | never evaluated |
; i++) { | 0 |
| 1560 | if (i == 0| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 1561 | passphrase = ""; never executed: passphrase = ""; | 0 |
| 1562 | else { | - |
| 1563 | passphrase = read_passphrase(prompt, 0); | - |
| 1564 | if (*| TRUE | never evaluated | | FALSE | never evaluated |
passphrase == '\0'| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 1565 | debug2("no passphrase given, try next key"); | - |
| 1566 | free(passphrase); | - |
| 1567 | break; never executed: break; | 0 |
| 1568 | } | - |
| 1569 | } never executed: end of block | 0 |
| 1570 | switch ((r = sshkey_load_private_type(KEY_UNSPEC, id->filename, | - |
| 1571 | passphrase, &private, &comment, &perm_ok))) { | - |
| 1572 | case never executed: case 0: 0:never executed: case 0: | 0 |
| 1573 | break; never executed: break; | 0 |
| 1574 | case never executed: case -43: -43:never executed: case -43: | 0 |
| 1575 | if (options.batch_mode| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 1576 | quit = 1; | - |
| 1577 | break; never executed: break; | 0 |
| 1578 | } | - |
| 1579 | if (i != 0| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 1580 | debug2("bad passphrase given, try again..."); never executed: debug2("bad passphrase given, try again..."); | 0 |
| 1581 | break; never executed: break; | 0 |
| 1582 | case never executed: case -24: -24:never executed: case -24: | 0 |
| 1583 | if ( | - |
| 1584 | (*| TRUE | never evaluated | | FALSE | never evaluated |
__errno_location ()) | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1585 | == | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1586 | 2| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1587 | ) { | - |
| 1588 | debug2("Load key \"%s\": %s", | - |
| 1589 | id->filename, ssh_err(r)); | - |
| 1590 | quit = 1; | - |
| 1591 | break; never executed: break; | 0 |
| 1592 | } | - |
| 1593 | | - |
| 1594 | default never executed: default: :never executed: default: code before this statement never executed: default: | 0 |
| 1595 | error("Load key \"%s\": %s", id->filename, ssh_err(r)); | - |
| 1596 | quit = 1; | - |
| 1597 | break; never executed: break; | 0 |
| 1598 | } | - |
| 1599 | if (!quit| TRUE | never evaluated | | FALSE | never evaluated |
&& private| TRUE | never evaluated | | FALSE | never evaluated |
!= | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1600 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1601 | && id->agent_fd == -1| TRUE | never evaluated | | FALSE | never evaluated |
&& | 0 |
| 1602 | !(id->key| TRUE | never evaluated | | FALSE | never evaluated |
&& id->isprivate| TRUE | never evaluated | | FALSE | never evaluated |
)) | 0 |
| 1603 | maybe_add_key_to_agent(id->filename, private, comment, never executed: maybe_add_key_to_agent(id->filename, private, comment, passphrase); | 0 |
| 1604 | passphrase); never executed: maybe_add_key_to_agent(id->filename, private, comment, passphrase); | 0 |
| 1605 | if (i > 0| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 1606 | freezero(passphrase, strlen(passphrase)); never executed: freezero(passphrase, strlen(passphrase)); | 0 |
| 1607 | free(comment); | - |
| 1608 | if (private| TRUE | never evaluated | | FALSE | never evaluated |
!= | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1609 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1610 | || quit| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 1611 | break; never executed: break; | 0 |
| 1612 | } never executed: end of block | 0 |
| 1613 | return never executed: return private; private;never executed: return private; | 0 |
| 1614 | } | - |
| 1615 | | - |
| 1616 | static int | - |
| 1617 | key_type_allowed_by_config(struct sshkey *key) | - |
| 1618 | { | - |
| 1619 | if (match_pattern_list(sshkey_ssh_name(key),| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1620 | options.pubkey_key_types, 0) == 1| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 1621 | return never executed: return 1; 1;never executed: return 1; | 0 |
| 1622 | | - |
| 1623 | | - |
| 1624 | switch (key->type) { | - |
| 1625 | case never executed: case KEY_RSA: KEY_RSA:never executed: case KEY_RSA: | 0 |
| 1626 | if (match_pattern_list("rsa-sha2-512",| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1627 | options.pubkey_key_types, 0) == 1| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 1628 | return never executed: return 1; 1;never executed: return 1; | 0 |
| 1629 | if (match_pattern_list("rsa-sha2-256",| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1630 | options.pubkey_key_types, 0) == 1| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 1631 | return never executed: return 1; 1;never executed: return 1; | 0 |
| 1632 | break; never executed: break; | 0 |
| 1633 | case never executed: case KEY_RSA_CERT: KEY_RSA_CERT:never executed: case KEY_RSA_CERT: | 0 |
| 1634 | if (match_pattern_list("rsa-sha2-512-cert-v01@openssh.com",| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1635 | options.pubkey_key_types, 0) == 1| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 1636 | return never executed: return 1; 1;never executed: return 1; | 0 |
| 1637 | if (match_pattern_list("rsa-sha2-256-cert-v01@openssh.com",| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1638 | options.pubkey_key_types, 0) == 1| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 1639 | return never executed: return 1; 1;never executed: return 1; | 0 |
| 1640 | break; never executed: break; | 0 |
| 1641 | } | - |
| 1642 | return never executed: return 0; 0;never executed: return 0; | 0 |
| 1643 | } | - |
| 1644 | static void | - |
| 1645 | pubkey_prepare(Authctxt *authctxt) | - |
| 1646 | { | - |
| 1647 | struct identity *id, *id2, *tmp; | - |
| 1648 | struct idlist agent, files, *preferred; | - |
| 1649 | struct sshkey *key; | - |
| 1650 | int agent_fd = -1, i, r, found; | - |
| 1651 | size_t j; | - |
| 1652 | struct ssh_identitylist *idlist; | - |
| 1653 | char *ident; | - |
| 1654 | | - |
| 1655 | do { (&agent)->tqh_first = | - |
| 1656 | ((void *)0) | - |
| 1657 | ; (&agent)->tqh_last = &(&agent)->tqh_first; } while (0); | - |
| 1658 | do { (&files)->tqh_first = | - |
| 1659 | ((void *)0) | - |
| 1660 | ; (&files)->tqh_last = &(&files)->tqh_first; } while (0); | - |
| 1661 | preferred = &authctxt->keys; | - |
| 1662 | do { (preferred)->tqh_first = | - |
| 1663 | ((void *)0) | - |
| 1664 | ; (preferred)->tqh_last = &(preferred)->tqh_first; } while (0); | - |
| 1665 | | - |
| 1666 | | - |
| 1667 | for (i = 0; i < options.num_identity_files| TRUE | never evaluated | | FALSE | never evaluated |
; i++) { | 0 |
| 1668 | key = options.identity_keys[i]; | - |
| 1669 | if (key| TRUE | never evaluated | | FALSE | never evaluated |
&& key->cert| TRUE | never evaluated | | FALSE | never evaluated |
&& key->cert->type != 1| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 1670 | continue; never executed: continue; | 0 |
| 1671 | options.identity_keys[i] = | - |
| 1672 | ((void *)0) | - |
| 1673 | ; | - |
| 1674 | id = xcalloc(1, sizeof(*id)); | - |
| 1675 | id->agent_fd = -1; | - |
| 1676 | id->key = key; | - |
| 1677 | id->filename = xstrdup(options.identity_files[i]); | - |
| 1678 | id->userprovided = options.identity_file_userprovided[i]; | - |
| 1679 | do { (id)->next.tqe_next = | - |
| 1680 | ((void *)0) | - |
| 1681 | ; (id)->next.tqe_prev = (&files)->tqh_last; *(&files)->tqh_last = (id); (&files)->tqh_last = &(id)->next.tqe_next; } while (0); | - |
| 1682 | } never executed: end of block | 0 |
| 1683 | | - |
| 1684 | for (i = 0; i < options.num_certificate_files| TRUE | never evaluated | | FALSE | never evaluated |
; i++) { | 0 |
| 1685 | key = options.certificates[i]; | - |
| 1686 | if (!sshkey_is_cert(key)| TRUE | never evaluated | | FALSE | never evaluated |
|| key->cert == | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1687 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1688 | || | - |
| 1689 | key->cert->type != 1| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 1690 | continue; never executed: continue; | 0 |
| 1691 | id = xcalloc(1, sizeof(*id)); | - |
| 1692 | id->agent_fd = -1; | - |
| 1693 | id->key = key; | - |
| 1694 | id->filename = xstrdup(options.certificate_files[i]); | - |
| 1695 | id->userprovided = options.certificate_file_userprovided[i]; | - |
| 1696 | do { (id)->next.tqe_next = | - |
| 1697 | ((void *)0) | - |
| 1698 | ; (id)->next.tqe_prev = (preferred)->tqh_last; *(preferred)->tqh_last = (id); (preferred)->tqh_last = &(id)->next.tqe_next; } while (0); | - |
| 1699 | } never executed: end of block | 0 |
| 1700 | | - |
| 1701 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
r = ssh_get_authentication_socket(&agent_fd)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 1702 | if (r != -47| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 1703 | debug("%s: ssh_get_authentication_socket: %s", never executed: debug("%s: ssh_get_authentication_socket: %s", __func__, ssh_err(r)); | 0 |
| 1704 | __func__, ssh_err(r)); never executed: debug("%s: ssh_get_authentication_socket: %s", __func__, ssh_err(r)); | 0 |
| 1705 | } never executed: end of block else if ((| TRUE | never evaluated | | FALSE | never evaluated |
r = ssh_fetch_identitylist(agent_fd, &idlist)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 1706 | if (r != -48| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 1707 | debug("%s: ssh_fetch_identitylist: %s", never executed: debug("%s: ssh_fetch_identitylist: %s", __func__, ssh_err(r)); | 0 |
| 1708 | __func__, ssh_err(r)); never executed: debug("%s: ssh_fetch_identitylist: %s", __func__, ssh_err(r)); | 0 |
| 1709 | close(agent_fd); | - |
| 1710 | } never executed: end of block else { | 0 |
| 1711 | for (j = 0; j < idlist->nkeys| TRUE | never evaluated | | FALSE | never evaluated |
; j++) { | 0 |
| 1712 | found = 0; | - |
| 1713 | for((id) = ((&files)->tqh_first); (| TRUE | never evaluated | | FALSE | never evaluated |
id) != | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1714 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1715 | ; (id) = ((id)->next.tqe_next)) { | - |
| 1716 | | - |
| 1717 | | - |
| 1718 | | - |
| 1719 | | - |
| 1720 | if (sshkey_equal(idlist->keys[j], id->key)| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 1721 | do { if (((| TRUE | never evaluated | | FALSE | never evaluated |
id)->next.tqe_next) != | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1722 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1723 | ) ( never executed: (id)->next.tqe_next->next.tqe_prev = (id)->next.tqe_prev; id)->next.tqe_next->next.tqe_prev = (id)->next.tqe_prev;never executed: (id)->next.tqe_next->next.tqe_prev = (id)->next.tqe_prev; else (never executed: (&files)->tqh_last = (id)->next.tqe_prev; &files)->tqh_last = (id)->next.tqe_prev;never executed: (&files)->tqh_last = (id)->next.tqe_prev; *(id)->next.tqe_prev = (id)->next.tqe_next; ; ; } while (0); | 0 |
| 1724 | do { (id)->next.tqe_next = | - |
| 1725 | ((void *)0) | - |
| 1726 | ; (id)->next.tqe_prev = (preferred)->tqh_last; *(preferred)->tqh_last = (id); (preferred)->tqh_last = &(id)->next.tqe_next; } while (0); | - |
| 1727 | id->agent_fd = agent_fd; | - |
| 1728 | found = 1; | - |
| 1729 | break; never executed: break; | 0 |
| 1730 | } | - |
| 1731 | } never executed: end of block | 0 |
| 1732 | if (!found| TRUE | never evaluated | | FALSE | never evaluated |
&& !options.identities_only| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 1733 | id = xcalloc(1, sizeof(*id)); | - |
| 1734 | | - |
| 1735 | id->key = idlist->keys[j]; | - |
| 1736 | id->filename = idlist->comments[j]; | - |
| 1737 | idlist->keys[j] = | - |
| 1738 | ((void *)0) | - |
| 1739 | ; | - |
| 1740 | idlist->comments[j] = | - |
| 1741 | ((void *)0) | - |
| 1742 | ; | - |
| 1743 | id->agent_fd = agent_fd; | - |
| 1744 | do { (id)->next.tqe_next = | - |
| 1745 | ((void *)0) | - |
| 1746 | ; (id)->next.tqe_prev = (&agent)->tqh_last; *(&agent)->tqh_last = (id); (&agent)->tqh_last = &(id)->next.tqe_next; } while (0); | - |
| 1747 | } never executed: end of block | 0 |
| 1748 | } never executed: end of block | 0 |
| 1749 | ssh_free_identitylist(idlist); | - |
| 1750 | | - |
| 1751 | for (id = ((&agent)->tqh_first); id| TRUE | never evaluated | | FALSE | never evaluated |
; id = ((&agent)->tqh_first)) { | 0 |
| 1752 | do { if (((| TRUE | never evaluated | | FALSE | never evaluated |
id)->next.tqe_next) != | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1753 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1754 | ) ( never executed: (id)->next.tqe_next->next.tqe_prev = (id)->next.tqe_prev; id)->next.tqe_next->next.tqe_prev = (id)->next.tqe_prev;never executed: (id)->next.tqe_next->next.tqe_prev = (id)->next.tqe_prev; else (never executed: (&agent)->tqh_last = (id)->next.tqe_prev; &agent)->tqh_last = (id)->next.tqe_prev;never executed: (&agent)->tqh_last = (id)->next.tqe_prev; *(id)->next.tqe_prev = (id)->next.tqe_next; ; ; } while (0); | 0 |
| 1755 | do { (id)->next.tqe_next = | - |
| 1756 | ((void *)0) | - |
| 1757 | ; (id)->next.tqe_prev = (preferred)->tqh_last; *(preferred)->tqh_last = (id); (preferred)->tqh_last = &(id)->next.tqe_next; } while (0); | - |
| 1758 | } never executed: end of block | 0 |
| 1759 | authctxt->agent_fd = agent_fd; | - |
| 1760 | } never executed: end of block | 0 |
| 1761 | | - |
| 1762 | for ((id) = ((&files)->tqh_first); (| TRUE | never evaluated | | FALSE | never evaluated |
id) != | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1763 | ((| TRUE | never evaluated | | FALSE | never evaluated |
| TRUE | never evaluated | | FALSE | never evaluated |
void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1764 | && ((tmp) = ((id)->next.tqe_next), 1); (id) = (tmp)) { | - |
| 1765 | if (id->key == | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1766 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1767 | || (| TRUE | never evaluated | | FALSE | never evaluated |
id->key->flags & 0x0001) == 0| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 1768 | continue; never executed: continue; | 0 |
| 1769 | found = 0; | - |
| 1770 | for((id2) = ((&files)->tqh_first); (| TRUE | never evaluated | | FALSE | never evaluated |
id2) != | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1771 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1772 | ; (id2) = ((id2)->next.tqe_next)) { | - |
| 1773 | if (id2->key == | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1774 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1775 | || | - |
| 1776 | (| TRUE | never evaluated | | FALSE | never evaluated |
id2->key->flags & 0x0001) == 0| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 1777 | continue; never executed: continue; | 0 |
| 1778 | if (sshkey_equal(id->key, id2->key)| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 1779 | do { if (((| TRUE | never evaluated | | FALSE | never evaluated |
id)->next.tqe_next) != | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1780 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1781 | ) ( never executed: (id)->next.tqe_next->next.tqe_prev = (id)->next.tqe_prev; id)->next.tqe_next->next.tqe_prev = (id)->next.tqe_prev;never executed: (id)->next.tqe_next->next.tqe_prev = (id)->next.tqe_prev; else (never executed: (&files)->tqh_last = (id)->next.tqe_prev; &files)->tqh_last = (id)->next.tqe_prev;never executed: (&files)->tqh_last = (id)->next.tqe_prev; *(id)->next.tqe_prev = (id)->next.tqe_next; ; ; } while (0); | 0 |
| 1782 | do { (id)->next.tqe_next = | - |
| 1783 | ((void *)0) | - |
| 1784 | ; (id)->next.tqe_prev = (preferred)->tqh_last; *(preferred)->tqh_last = (id); (preferred)->tqh_last = &(id)->next.tqe_next; } while (0); | - |
| 1785 | found = 1; | - |
| 1786 | break; never executed: break; | 0 |
| 1787 | } | - |
| 1788 | } never executed: end of block | 0 |
| 1789 | | - |
| 1790 | if (!found| TRUE | never evaluated | | FALSE | never evaluated |
&& options.identities_only| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 1791 | do { if (((| TRUE | never evaluated | | FALSE | never evaluated |
id)->next.tqe_next) != | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1792 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1793 | ) ( never executed: (id)->next.tqe_next->next.tqe_prev = (id)->next.tqe_prev; id)->next.tqe_next->next.tqe_prev = (id)->next.tqe_prev;never executed: (id)->next.tqe_next->next.tqe_prev = (id)->next.tqe_prev; else (never executed: (&files)->tqh_last = (id)->next.tqe_prev; &files)->tqh_last = (id)->next.tqe_prev;never executed: (&files)->tqh_last = (id)->next.tqe_prev; *(id)->next.tqe_prev = (id)->next.tqe_next; ; ; } while (0); | 0 |
| 1794 | freezero(id, sizeof(*id)); | - |
| 1795 | } never executed: end of block | 0 |
| 1796 | } never executed: end of block | 0 |
| 1797 | | - |
| 1798 | for (id = ((&files)->tqh_first); id| TRUE | never evaluated | | FALSE | never evaluated |
; id = ((&files)->tqh_first)) { | 0 |
| 1799 | do { if (((| TRUE | never evaluated | | FALSE | never evaluated |
id)->next.tqe_next) != | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1800 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1801 | ) ( never executed: (id)->next.tqe_next->next.tqe_prev = (id)->next.tqe_prev; id)->next.tqe_next->next.tqe_prev = (id)->next.tqe_prev;never executed: (id)->next.tqe_next->next.tqe_prev = (id)->next.tqe_prev; else (never executed: (&files)->tqh_last = (id)->next.tqe_prev; &files)->tqh_last = (id)->next.tqe_prev;never executed: (&files)->tqh_last = (id)->next.tqe_prev; *(id)->next.tqe_prev = (id)->next.tqe_next; ; ; } while (0); | 0 |
| 1802 | do { (id)->next.tqe_next = | - |
| 1803 | ((void *)0) | - |
| 1804 | ; (id)->next.tqe_prev = (preferred)->tqh_last; *(preferred)->tqh_last = (id); (preferred)->tqh_last = &(id)->next.tqe_next; } while (0); | - |
| 1805 | } never executed: end of block | 0 |
| 1806 | | - |
| 1807 | for ((id) = ((preferred)->tqh_first); (| TRUE | never evaluated | | FALSE | never evaluated |
id) != | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1808 | ((| TRUE | never evaluated | | FALSE | never evaluated |
| TRUE | never evaluated | | FALSE | never evaluated |
void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1809 | && ((id2) = ((id)->next.tqe_next), 1); (id) = (id2)) { | - |
| 1810 | if (id->key != | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1811 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1812 | && !key_type_allowed_by_config(id->key)| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 1813 | debug("Skipping %s key %s - " | - |
| 1814 | "not in PubkeyAcceptedKeyTypes", | - |
| 1815 | sshkey_ssh_name(id->key), id->filename); | - |
| 1816 | do { if (((| TRUE | never evaluated | | FALSE | never evaluated |
id)->next.tqe_next) != | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1817 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1818 | ) ( never executed: (id)->next.tqe_next->next.tqe_prev = (id)->next.tqe_prev; id)->next.tqe_next->next.tqe_prev = (id)->next.tqe_prev;never executed: (id)->next.tqe_next->next.tqe_prev = (id)->next.tqe_prev; else (never executed: (preferred)->tqh_last = (id)->next.tqe_prev; preferred)->tqh_last = (id)->next.tqe_prev;never executed: (preferred)->tqh_last = (id)->next.tqe_prev; *(id)->next.tqe_prev = (id)->next.tqe_next; ; ; } while (0); | 0 |
| 1819 | sshkey_free(id->key); | - |
| 1820 | free(id->filename); | - |
| 1821 | memset(id, 0, sizeof(*id)); | - |
| 1822 | continue; never executed: continue; | 0 |
| 1823 | } | - |
| 1824 | } never executed: end of block | 0 |
| 1825 | | - |
| 1826 | for ((id) = ((preferred)->tqh_first); (| TRUE | never evaluated | | FALSE | never evaluated |
id) != | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1827 | ((| TRUE | never evaluated | | FALSE | never evaluated |
| TRUE | never evaluated | | FALSE | never evaluated |
void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1828 | && ((id2) = ((id)->next.tqe_next), 1); (id) = (id2)) { | - |
| 1829 | ident = format_identity(id); | - |
| 1830 | debug("Will attempt key: %s", ident); | - |
| 1831 | free(ident); | - |
| 1832 | } never executed: end of block | 0 |
| 1833 | debug2("%s: done", __func__); | - |
| 1834 | } never executed: end of block | 0 |
| 1835 | | - |
| 1836 | static void | - |
| 1837 | pubkey_cleanup(Authctxt *authctxt) | - |
| 1838 | { | - |
| 1839 | Identity *id; | - |
| 1840 | | - |
| 1841 | if (authctxt->agent_fd != -1| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 1842 | ssh_close_authentication_socket(authctxt->agent_fd); never executed: ssh_close_authentication_socket(authctxt->agent_fd); | 0 |
| 1843 | for (id = ((&authctxt->keys)->tqh_first); id| TRUE | never evaluated | | FALSE | never evaluated |
; | 0 |
| 1844 | id = ((&authctxt->keys)->tqh_first)) { | - |
| 1845 | do { if (((| TRUE | never evaluated | | FALSE | never evaluated |
id)->next.tqe_next) != | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1846 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1847 | ) ( never executed: (id)->next.tqe_next->next.tqe_prev = (id)->next.tqe_prev; id)->next.tqe_next->next.tqe_prev = (id)->next.tqe_prev;never executed: (id)->next.tqe_next->next.tqe_prev = (id)->next.tqe_prev; else (never executed: (&authctxt->keys)->tqh_last = (id)->next.tqe_prev; &authctxt->keys)->tqh_last = (id)->next.tqe_prev;never executed: (&authctxt->keys)->tqh_last = (id)->next.tqe_prev; *(id)->next.tqe_prev = (id)->next.tqe_next; ; ; } while (0); | 0 |
| 1848 | sshkey_free(id->key); | - |
| 1849 | free(id->filename); | - |
| 1850 | free(id); | - |
| 1851 | } never executed: end of block | 0 |
| 1852 | } never executed: end of block | 0 |
| 1853 | | - |
| 1854 | static void | - |
| 1855 | pubkey_reset(Authctxt *authctxt) | - |
| 1856 | { | - |
| 1857 | Identity *id; | - |
| 1858 | | - |
| 1859 | for((id) = ((&authctxt->keys)->tqh_first); (| TRUE | never evaluated | | FALSE | never evaluated |
id) != | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1860 | ((| TRUE | never evaluated | | FALSE | never evaluated |
| TRUE | never evaluated | | FALSE | never evaluated |
void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1861 | ; (id) = ((id)->next.tqe_next)) | - |
| 1862 | id->tried = 0; never executed: id->tried = 0; | 0 |
| 1863 | } never executed: end of block | 0 |
| 1864 | | - |
| 1865 | static int | - |
| 1866 | try_identity(Identity *id) | - |
| 1867 | { | - |
| 1868 | if (!id->key| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 1869 | return never executed: return (0); (0);never executed: return (0); | 0 |
| 1870 | if (sshkey_type_plain(id->key->type) == KEY_RSA| TRUE | never evaluated | | FALSE | never evaluated |
&& | 0 |
| 1871 | (| TRUE | never evaluated | | FALSE | never evaluated |
datafellows & 0x00002000) != 0| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 1872 | debug("Skipped %s key %s for RSA/MD5 server", | - |
| 1873 | sshkey_type(id->key), id->filename); | - |
| 1874 | return never executed: return (0); (0);never executed: return (0); | 0 |
| 1875 | } | - |
| 1876 | return never executed: return 1; 1;never executed: return 1; | 0 |
| 1877 | } | - |
| 1878 | | - |
| 1879 | int | - |
| 1880 | userauth_pubkey(Authctxt *authctxt) | - |
| 1881 | { | - |
| 1882 | struct ssh *ssh = active_state; | - |
| 1883 | Identity *id; | - |
| 1884 | int sent = 0; | - |
| 1885 | char *ident; | - |
| 1886 | | - |
| 1887 | while ((| TRUE | never evaluated | | FALSE | never evaluated |
id = ((&authctxt->keys)->tqh_first))| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 1888 | if (id->tried++| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 1889 | return never executed: return (0); (0);never executed: return (0); | 0 |
| 1890 | | - |
| 1891 | do { if (((| TRUE | never evaluated | | FALSE | never evaluated |
id)->next.tqe_next) != | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1892 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1893 | ) ( never executed: (id)->next.tqe_next->next.tqe_prev = (id)->next.tqe_prev; id)->next.tqe_next->next.tqe_prev = (id)->next.tqe_prev;never executed: (id)->next.tqe_next->next.tqe_prev = (id)->next.tqe_prev; else (never executed: (&authctxt->keys)->tqh_last = (id)->next.tqe_prev; &authctxt->keys)->tqh_last = (id)->next.tqe_prev;never executed: (&authctxt->keys)->tqh_last = (id)->next.tqe_prev; *(id)->next.tqe_prev = (id)->next.tqe_next; ; ; } while (0); | 0 |
| 1894 | do { (id)->next.tqe_next = | - |
| 1895 | ((void *)0) | - |
| 1896 | ; (id)->next.tqe_prev = (&authctxt->keys)->tqh_last; *(&authctxt->keys)->tqh_last = (id); (&authctxt->keys)->tqh_last = &(id)->next.tqe_next; } while (0); | - |
| 1897 | | - |
| 1898 | | - |
| 1899 | | - |
| 1900 | | - |
| 1901 | | - |
| 1902 | if (id->key != | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1903 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1904 | ) { | - |
| 1905 | if (try_identity(id)| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 1906 | ident = format_identity(id); | - |
| 1907 | debug("Offering public key: %s", ident); | - |
| 1908 | free(ident); | - |
| 1909 | sent = send_pubkey_test(ssh, authctxt, id); | - |
| 1910 | } never executed: end of block | 0 |
| 1911 | } never executed: end of block else { | 0 |
| 1912 | debug("Trying private key: %s", id->filename); | - |
| 1913 | id->key = load_identity_file(id); | - |
| 1914 | if (id->key != | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1915 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1916 | ) { | - |
| 1917 | if (try_identity(id)| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 1918 | id->isprivate = 1; | - |
| 1919 | sent = sign_and_send_pubkey(ssh, | - |
| 1920 | authctxt, id); | - |
| 1921 | } never executed: end of block | 0 |
| 1922 | sshkey_free(id->key); | - |
| 1923 | id->key = | - |
| 1924 | ((void *)0) | - |
| 1925 | ; | - |
| 1926 | id->isprivate = 0; | - |
| 1927 | } never executed: end of block | 0 |
| 1928 | } never executed: end of block | 0 |
| 1929 | if (sent| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 1930 | return never executed: return (sent); (sent);never executed: return (sent); | 0 |
| 1931 | } never executed: end of block | 0 |
| 1932 | return never executed: return (0); (0);never executed: return (0); | 0 |
| 1933 | } | - |
| 1934 | | - |
| 1935 | | - |
| 1936 | | - |
| 1937 | | - |
| 1938 | int | - |
| 1939 | userauth_kbdint(Authctxt *authctxt) | - |
| 1940 | { | - |
| 1941 | struct ssh *ssh = active_state; | - |
| 1942 | static int attempt = 0; | - |
| 1943 | int r; | - |
| 1944 | | - |
| 1945 | if (attempt++ >= options.number_of_password_prompts| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 1946 | return never executed: return 0; 0;never executed: return 0; | 0 |
| 1947 | | - |
| 1948 | if (attempt > 1| TRUE | never evaluated | | FALSE | never evaluated |
&& !authctxt->info_req_seen| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 1949 | debug3("userauth_kbdint: disable: no info_req_seen"); | - |
| 1950 | ssh_dispatch_set(ssh, 60, | - |
| 1951 | ((void *)0) | - |
| 1952 | ); | - |
| 1953 | return never executed: return 0; 0;never executed: return 0; | 0 |
| 1954 | } | - |
| 1955 | | - |
| 1956 | debug2("userauth_kbdint"); | - |
| 1957 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_start(ssh, 50)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 1958 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_put_cstring(ssh, authctxt->server_user)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 1959 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_put_cstring(ssh, authctxt->service)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 1960 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_put_cstring(ssh, authctxt->method->name)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 1961 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_put_cstring(ssh, "")) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 1962 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_put_cstring(ssh, options.kbd_interactive_devices ?| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1963 | options.kbd_interactive_devices : "")) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 1964 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_send(ssh)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 1965 | fatal("%s: %s", __func__, ssh_err(r)); never executed: fatal("%s: %s", __func__, ssh_err(r)); | 0 |
| 1966 | | - |
| 1967 | ssh_dispatch_set(ssh, 60, &input_userauth_info_req); | - |
| 1968 | return never executed: return 1; 1;never executed: return 1; | 0 |
| 1969 | } | - |
| 1970 | | - |
| 1971 | | - |
| 1972 | | - |
| 1973 | | - |
| 1974 | int | - |
| 1975 | input_userauth_info_req(int type, u_int32_t seq, struct ssh *ssh) | - |
| 1976 | { | - |
| 1977 | Authctxt *authctxt = ssh->authctxt; | - |
| 1978 | char *name = | - |
| 1979 | ((void *)0) | - |
| 1980 | , *inst = | - |
| 1981 | ((void *)0) | - |
| 1982 | , *lang = | - |
| 1983 | ((void *)0) | - |
| 1984 | , *prompt = | - |
| 1985 | ((void *)0) | - |
| 1986 | ; | - |
| 1987 | char *response = | - |
| 1988 | ((void *)0) | - |
| 1989 | ; | - |
| 1990 | u_char echo = 0; | - |
| 1991 | u_int num_prompts, i; | - |
| 1992 | int r; | - |
| 1993 | | - |
| 1994 | debug2("input_userauth_info_req"); | - |
| 1995 | | - |
| 1996 | if (authctxt == | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1997 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 1998 | ) | - |
| 1999 | fatal("input_userauth_info_req: no authentication context"); never executed: fatal("input_userauth_info_req: no authentication context"); | 0 |
| 2000 | | - |
| 2001 | authctxt->info_req_seen = 1; | - |
| 2002 | | - |
| 2003 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_get_cstring(ssh, &name, | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2004 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2005 | )) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 2006 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_get_cstring(ssh, &inst, | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2007 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2008 | )) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 2009 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_get_cstring(ssh, &lang, | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2010 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2011 | )) != 0| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 2012 | goto never executed: goto out; out;never executed: goto out; | 0 |
| 2013 | if (strlen(name) > 0| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 2014 | logit("%s", name); never executed: logit("%s", name); | 0 |
| 2015 | if (strlen(inst) > 0| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 2016 | logit("%s", inst); never executed: logit("%s", inst); | 0 |
| 2017 | | - |
| 2018 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_get_u32(ssh, &num_prompts)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 2019 | goto never executed: goto out; out;never executed: goto out; | 0 |
| 2020 | | - |
| 2021 | | - |
| 2022 | | - |
| 2023 | | - |
| 2024 | | - |
| 2025 | | - |
| 2026 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_start(ssh, 61)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 2027 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_put_u32(ssh, num_prompts)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 2028 | goto never executed: goto out; out;never executed: goto out; | 0 |
| 2029 | | - |
| 2030 | debug2("input_userauth_info_req: num_prompts %d", num_prompts); | - |
| 2031 | for (i = 0; i < num_prompts| TRUE | never evaluated | | FALSE | never evaluated |
; i++) { | 0 |
| 2032 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_get_cstring(ssh, &prompt, | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2033 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2034 | )) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 2035 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_get_u8(ssh, &echo)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 2036 | goto never executed: goto out; out;never executed: goto out; | 0 |
| 2037 | response = read_passphrase(prompt, echo ? 0x0001 : 0); | - |
| 2038 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_put_cstring(ssh, response)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 2039 | goto never executed: goto out; out;never executed: goto out; | 0 |
| 2040 | freezero(response, strlen(response)); | - |
| 2041 | free(prompt); | - |
| 2042 | response = prompt = | - |
| 2043 | ((void *)0) | - |
| 2044 | ; | - |
| 2045 | } never executed: end of block | 0 |
| 2046 | | - |
| 2047 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_get_end(ssh)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 2048 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_add_padding(ssh, 64)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 2049 | goto never executed: goto out; out;never executed: goto out; | 0 |
| 2050 | r = sshpkt_send(ssh); | - |
| 2051 | out: code before this statement never executed: out: | 0 |
| 2052 | if (response| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 2053 | freezero(response, strlen(response)); never executed: freezero(response, strlen(response)); | 0 |
| 2054 | free(prompt); | - |
| 2055 | free(name); | - |
| 2056 | free(inst); | - |
| 2057 | free(lang); | - |
| 2058 | return never executed: return r; r;never executed: return r; | 0 |
| 2059 | } | - |
| 2060 | | - |
| 2061 | static int | - |
| 2062 | ssh_keysign(struct sshkey *key, u_char **sigp, size_t *lenp, | - |
| 2063 | const u_char *data, size_t datalen) | - |
| 2064 | { | - |
| 2065 | struct sshbuf *b; | - |
| 2066 | struct stat st; | - |
| 2067 | pid_t pid; | - |
| 2068 | int i, r, to[2], from[2], status, sock = ssh_packet_get_connection_in(active_state); | - |
| 2069 | u_char rversion = 0, version = 2; | - |
| 2070 | void (*osigchld)(int); | - |
| 2071 | | - |
| 2072 | *sigp = | - |
| 2073 | ((void *)0) | - |
| 2074 | ; | - |
| 2075 | *lenp = 0; | - |
| 2076 | | - |
| 2077 | if (stat("/var/tmp/openssh-test/libexec/ssh-keysign", &st) < 0| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 2078 | error("%s: not installed: %s", __func__, strerror( | - |
| 2079 | (*__errno_location ()) | - |
| 2080 | )); | - |
| 2081 | return never executed: return -1; -1;never executed: return -1; | 0 |
| 2082 | } | - |
| 2083 | if (fflush(| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2084 | stdout| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2085 | ) != 0| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 2086 | error("%s: fflush: %s", __func__, strerror( | - |
| 2087 | (*__errno_location ()) | - |
| 2088 | )); | - |
| 2089 | return never executed: return -1; -1;never executed: return -1; | 0 |
| 2090 | } | - |
| 2091 | if (pipe(to) < 0| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 2092 | error("%s: pipe: %s", __func__, strerror( | - |
| 2093 | (*__errno_location ()) | - |
| 2094 | )); | - |
| 2095 | return never executed: return -1; -1;never executed: return -1; | 0 |
| 2096 | } | - |
| 2097 | if (pipe(from) < 0| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 2098 | error("%s: pipe: %s", __func__, strerror( | - |
| 2099 | (*__errno_location ()) | - |
| 2100 | )); | - |
| 2101 | return never executed: return -1; -1;never executed: return -1; | 0 |
| 2102 | } | - |
| 2103 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
pid = fork()) < 0| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 2104 | error("%s: fork: %s", __func__, strerror( | - |
| 2105 | (*__errno_location ()) | - |
| 2106 | )); | - |
| 2107 | return never executed: return -1; -1;never executed: return -1; | 0 |
| 2108 | } | - |
| 2109 | osigchld = mysignal( | - |
| 2110 | 17 | - |
| 2111 | , | - |
| 2112 | ((__sighandler_t) 0) | - |
| 2113 | ); | - |
| 2114 | if (pid == 0| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 2115 | | - |
| 2116 | fcntl(sock, | - |
| 2117 | 2 | - |
| 2118 | , 0); | - |
| 2119 | close(from[0]); | - |
| 2120 | if (dup2(from[1], | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2121 | 1| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2122 | ) < 0| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 2123 | fatal("%s: dup2: %s", __func__, strerror( never executed: fatal("%s: dup2: %s", __func__, strerror( (*__errno_location ()) )); | 0 |
| 2124 | (*__errno_location ()) never executed: fatal("%s: dup2: %s", __func__, strerror( (*__errno_location ()) )); | 0 |
| 2125 | )); never executed: fatal("%s: dup2: %s", __func__, strerror( (*__errno_location ()) )); | 0 |
| 2126 | close(to[1]); | - |
| 2127 | if (dup2(to[0], | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2128 | 0| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2129 | ) < 0| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 2130 | fatal("%s: dup2: %s", __func__, strerror( never executed: fatal("%s: dup2: %s", __func__, strerror( (*__errno_location ()) )); | 0 |
| 2131 | (*__errno_location ()) never executed: fatal("%s: dup2: %s", __func__, strerror( (*__errno_location ()) )); | 0 |
| 2132 | )); never executed: fatal("%s: dup2: %s", __func__, strerror( (*__errno_location ()) )); | 0 |
| 2133 | close(from[1]); | - |
| 2134 | close(to[0]); | - |
| 2135 | | - |
| 2136 | for (i = | - |
| 2137 | 2 | - |
| 2138 | + 1; i < sock| TRUE | never evaluated | | FALSE | never evaluated |
; i++) | 0 |
| 2139 | close(i); never executed: close(i); | 0 |
| 2140 | closefrom(sock + 1); | - |
| 2141 | debug3("%s: [child] pid=%ld, exec %s", | - |
| 2142 | __func__, (long)getpid(), "/var/tmp/openssh-test/libexec/ssh-keysign"); | - |
| 2143 | execl("/var/tmp/openssh-test/libexec/ssh-keysign", "/var/tmp/openssh-test/libexec/ssh-keysign", (char *) | - |
| 2144 | ((void *)0) | - |
| 2145 | ); | - |
| 2146 | fatal("%s: exec(%s): %s", __func__, "/var/tmp/openssh-test/libexec/ssh-keysign", | - |
| 2147 | strerror( | - |
| 2148 | (*__errno_location ()) | - |
| 2149 | )); | - |
| 2150 | } never executed: end of block | 0 |
| 2151 | close(from[1]); | - |
| 2152 | close(to[0]); | - |
| 2153 | | - |
| 2154 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
b = sshbuf_new()) == | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2155 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2156 | ) | - |
| 2157 | fatal("%s: sshbuf_new failed", __func__); never executed: fatal("%s: sshbuf_new failed", __func__); | 0 |
| 2158 | | - |
| 2159 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
r = sshbuf_put_u32(b, sock)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 2160 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshbuf_put_string(b, data, datalen)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 2161 | fatal("%s: buffer error: %s", __func__, ssh_err(r)); never executed: fatal("%s: buffer error: %s", __func__, ssh_err(r)); | 0 |
| 2162 | if (ssh_msg_send(to[1], version, b) == -1| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 2163 | fatal("%s: couldn't send request", __func__); never executed: fatal("%s: couldn't send request", __func__); | 0 |
| 2164 | sshbuf_reset(b); | - |
| 2165 | r = ssh_msg_recv(from[0], b); | - |
| 2166 | close(from[0]); | - |
| 2167 | close(to[1]); | - |
| 2168 | if (r < 0| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 2169 | error("%s: no reply", __func__); | - |
| 2170 | goto never executed: goto fail; fail;never executed: goto fail; | 0 |
| 2171 | } | - |
| 2172 | | - |
| 2173 | | - |
| 2174 | (*__errno_location ()) | - |
| 2175 | = 0; | - |
| 2176 | while (waitpid(pid, &status, 0) < 0| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 2177 | if ( | - |
| 2178 | (*| TRUE | never evaluated | | FALSE | never evaluated |
__errno_location ()) | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2179 | != | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2180 | 4| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2181 | ) { | - |
| 2182 | error("%s: waitpid %ld: %s", | - |
| 2183 | __func__, (long)pid, strerror( | - |
| 2184 | (*__errno_location ()) | - |
| 2185 | )); | - |
| 2186 | goto never executed: goto fail; fail;never executed: goto fail; | 0 |
| 2187 | } | - |
| 2188 | } never executed: end of block | 0 |
| 2189 | if (!| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2190 | (((| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2191 | status| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2192 | ) & 0x7f) == 0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2193 | ) { | - |
| 2194 | error("%s: exited abnormally", __func__); | - |
| 2195 | goto never executed: goto fail; fail;never executed: goto fail; | 0 |
| 2196 | } | - |
| 2197 | if ( | - |
| 2198 | (((| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2199 | status| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2200 | ) & 0xff00) >> 8) | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2201 | != 0| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 2202 | error("%s: exited with status %d", | - |
| 2203 | __func__, | - |
| 2204 | ((( | - |
| 2205 | status | - |
| 2206 | ) & 0xff00) >> 8) | - |
| 2207 | ); | - |
| 2208 | goto never executed: goto fail; fail;never executed: goto fail; | 0 |
| 2209 | } | - |
| 2210 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
r = sshbuf_get_u8(b, &rversion)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 2211 | error("%s: buffer error: %s", __func__, ssh_err(r)); | - |
| 2212 | goto never executed: goto fail; fail;never executed: goto fail; | 0 |
| 2213 | } | - |
| 2214 | if (rversion != version| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 2215 | error("%s: bad version", __func__); | - |
| 2216 | goto never executed: goto fail; fail;never executed: goto fail; | 0 |
| 2217 | } | - |
| 2218 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
r = sshbuf_get_string(b, sigp, lenp)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 2219 | error("%s: buffer error: %s", __func__, ssh_err(r)); | - |
| 2220 | fail: code before this statement never executed: fail: | 0 |
| 2221 | mysignal( | - |
| 2222 | 17 | - |
| 2223 | ,osigchld); | - |
| 2224 | sshbuf_free(b); | - |
| 2225 | return never executed: return -1; -1;never executed: return -1; | 0 |
| 2226 | } | - |
| 2227 | mysignal( | - |
| 2228 | 17 | - |
| 2229 | ,osigchld); | - |
| 2230 | sshbuf_free(b); | - |
| 2231 | | - |
| 2232 | return never executed: return 0; 0;never executed: return 0; | 0 |
| 2233 | } | - |
| 2234 | | - |
| 2235 | int | - |
| 2236 | userauth_hostbased(Authctxt *authctxt) | - |
| 2237 | { | - |
| 2238 | struct ssh *ssh = active_state; | - |
| 2239 | struct sshkey *private = | - |
| 2240 | ((void *)0) | - |
| 2241 | ; | - |
| 2242 | struct sshbuf *b = | - |
| 2243 | ((void *)0) | - |
| 2244 | ; | - |
| 2245 | u_char *sig = | - |
| 2246 | ((void *)0) | - |
| 2247 | , *keyblob = | - |
| 2248 | ((void *)0) | - |
| 2249 | ; | - |
| 2250 | char *fp = | - |
| 2251 | ((void *)0) | - |
| 2252 | , *chost = | - |
| 2253 | ((void *)0) | - |
| 2254 | , *lname = | - |
| 2255 | ((void *)0) | - |
| 2256 | ; | - |
| 2257 | size_t siglen = 0, keylen = 0; | - |
| 2258 | int i, r, success = 0; | - |
| 2259 | | - |
| 2260 | if (authctxt->ktypes == | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2261 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2262 | ) { | - |
| 2263 | authctxt->oktypes = xstrdup(options.hostbased_key_types); | - |
| 2264 | authctxt->ktypes = authctxt->oktypes; | - |
| 2265 | } never executed: end of block | 0 |
| 2266 | | - |
| 2267 | | - |
| 2268 | | - |
| 2269 | | - |
| 2270 | | - |
| 2271 | for (;;) { | - |
| 2272 | if (authctxt->active_ktype == | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2273 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2274 | ) | - |
| 2275 | authctxt->active_ktype = never executed: authctxt->active_ktype = __extension__ ({ char __r0, __r1, __r2; (__builtin_constant_p ( "," ) && ((size_t)(const void *)(( "," ) + 1) - (size_t)(const void *)( "," ) == 1) && (__r0 = ((const char *) ( "," ))[0], ((const char *) ( "," ))[0] != '\0') ? ((_..." ))[2], __r2 == '\0') ? __strsep_2c ( &authctxt->ktypes , __r0, __r1) : (((const char *) ( "," ))[3] == '\0' ? __strsep_3c ( &authctxt->ktypes , __r0, __r1, __r2) : __strsep_g ( &authctxt->ktypes , "," )))) : __strsep_g ( &authctxt->ktypes , "," )); }) ; | 0 |
| 2276 | __extension__ ({ char __r0, __r1, __r2; (__builtin_constant_p ( never executed: authctxt->active_ktype = __extension__ ({ char __r0, __r1, __r2; (__builtin_constant_p ( "," ) && ((size_t)(const void *)(( "," ) + 1) - (size_t)(const void *)( "," ) == 1) && (__r0 = ((const char *) ( "," ))[0], ((const char *) ( "," ))[0] != '\0') ? ((_..." ))[2], __r2 == '\0') ? __strsep_2c ( &authctxt->ktypes , __r0, __r1) : (((const char *) ( "," ))[3] == '\0' ? __strsep_3c ( &authctxt->ktypes , __r0, __r1, __r2) : __strsep_g ( &authctxt->ktypes , "," )))) : __strsep_g ( &authctxt->ktypes , "," )); }) ; | 0 |
| 2277 | "," never executed: authctxt->active_ktype = __extension__ ({ char __r0, __r1, __r2; (__builtin_constant_p ( "," ) && ((size_t)(const void *)(( "," ) + 1) - (size_t)(const void *)( "," ) == 1) && (__r0 = ((const char *) ( "," ))[0], ((const char *) ( "," ))[0] != '\0') ? ((_..." ))[2], __r2 == '\0') ? __strsep_2c ( &authctxt->ktypes , __r0, __r1) : (((const char *) ( "," ))[3] == '\0' ? __strsep_3c ( &authctxt->ktypes , __r0, __r1, __r2) : __strsep_g ( &authctxt->ktypes , "," )))) : __strsep_g ( &authctxt->ktypes , "," )); }) ; | 0 |
| 2278 | ) && ((size_t)(const void *)(( never executed: authctxt->active_ktype = __extension__ ({ char __r0, __r1, __r2; (__builtin_constant_p ( "," ) && ((size_t)(const void *)(( "," ) + 1) - (size_t)(const void *)( "," ) == 1) && (__r0 = ((const char *) ( "," ))[0], ((const char *) ( "," ))[0] != '\0') ? ((_..." ))[2], __r2 == '\0') ? __strsep_2c ( &authctxt->ktypes , __r0, __r1) : (((const char *) ( "," ))[3] == '\0' ? __strsep_3c ( &authctxt->ktypes , __r0, __r1, __r2) : __strsep_g ( &authctxt->ktypes , "," )))) : __strsep_g ( &authctxt->ktypes , "," )); }) ; | 0 |
| 2279 | "," never executed: authctxt->active_ktype = __extension__ ({ char __r0, __r1, __r2; (__builtin_constant_p ( "," ) && ((size_t)(const void *)(( "," ) + 1) - (size_t)(const void *)( "," ) == 1) && (__r0 = ((const char *) ( "," ))[0], ((const char *) ( "," ))[0] != '\0') ? ((_..." ))[2], __r2 == '\0') ? __strsep_2c ( &authctxt->ktypes , __r0, __r1) : (((const char *) ( "," ))[3] == '\0' ? __strsep_3c ( &authctxt->ktypes , __r0, __r1, __r2) : __strsep_g ( &authctxt->ktypes , "," )))) : __strsep_g ( &authctxt->ktypes , "," )); }) ; | 0 |
| 2280 | ) + 1) - (size_t)(const void *)( never executed: authctxt->active_ktype = __extension__ ({ char __r0, __r1, __r2; (__builtin_constant_p ( "," ) && ((size_t)(const void *)(( "," ) + 1) - (size_t)(const void *)( "," ) == 1) && (__r0 = ((const char *) ( "," ))[0], ((const char *) ( "," ))[0] != '\0') ? ((_..." ))[2], __r2 == '\0') ? __strsep_2c ( &authctxt->ktypes , __r0, __r1) : (((const char *) ( "," ))[3] == '\0' ? __strsep_3c ( &authctxt->ktypes , __r0, __r1, __r2) : __strsep_g ( &authctxt->ktypes , "," )))) : __strsep_g ( &authctxt->ktypes , "," )); }) ; | 0 |
| 2281 | "," never executed: authctxt->active_ktype = __extension__ ({ char __r0, __r1, __r2; (__builtin_constant_p ( "," ) && ((size_t)(const void *)(( "," ) + 1) - (size_t)(const void *)( "," ) == 1) && (__r0 = ((const char *) ( "," ))[0], ((const char *) ( "," ))[0] != '\0') ? ((_..." ))[2], __r2 == '\0') ? __strsep_2c ( &authctxt->ktypes , __r0, __r1) : (((const char *) ( "," ))[3] == '\0' ? __strsep_3c ( &authctxt->ktypes , __r0, __r1, __r2) : __strsep_g ( &authctxt->ktypes , "," )))) : __strsep_g ( &authctxt->ktypes , "," )); }) ; | 0 |
| 2282 | ) == 1) && (__r0 = ((const char *) ( never executed: authctxt->active_ktype = __extension__ ({ char __r0, __r1, __r2; (__builtin_constant_p ( "," ) && ((size_t)(const void *)(( "," ) + 1) - (size_t)(const void *)( "," ) == 1) && (__r0 = ((const char *) ( "," ))[0], ((const char *) ( "," ))[0] != '\0') ? ((_..." ))[2], __r2 == '\0') ? __strsep_2c ( &authctxt->ktypes , __r0, __r1) : (((const char *) ( "," ))[3] == '\0' ? __strsep_3c ( &authctxt->ktypes , __r0, __r1, __r2) : __strsep_g ( &authctxt->ktypes , "," )))) : __strsep_g ( &authctxt->ktypes , "," )); }) ; | 0 |
| 2283 | "," never executed: authctxt->active_ktype = __extension__ ({ char __r0, __r1, __r2; (__builtin_constant_p ( "," ) && ((size_t)(const void *)(( "," ) + 1) - (size_t)(const void *)( "," ) == 1) && (__r0 = ((const char *) ( "," ))[0], ((const char *) ( "," ))[0] != '\0') ? ((_..." ))[2], __r2 == '\0') ? __strsep_2c ( &authctxt->ktypes , __r0, __r1) : (((const char *) ( "," ))[3] == '\0' ? __strsep_3c ( &authctxt->ktypes , __r0, __r1, __r2) : __strsep_g ( &authctxt->ktypes , "," )))) : __strsep_g ( &authctxt->ktypes , "," )); }) ; | 0 |
| 2284 | ))[0], ((const char *) ( never executed: authctxt->active_ktype = __extension__ ({ char __r0, __r1, __r2; (__builtin_constant_p ( "," ) && ((size_t)(const void *)(( "," ) + 1) - (size_t)(const void *)( "," ) == 1) && (__r0 = ((const char *) ( "," ))[0], ((const char *) ( "," ))[0] != '\0') ? ((_..." ))[2], __r2 == '\0') ? __strsep_2c ( &authctxt->ktypes , __r0, __r1) : (((const char *) ( "," ))[3] == '\0' ? __strsep_3c ( &authctxt->ktypes , __r0, __r1, __r2) : __strsep_g ( &authctxt->ktypes , "," )))) : __strsep_g ( &authctxt->ktypes , "," )); }) ; | 0 |
| 2285 | "," never executed: authctxt->active_ktype = __extension__ ({ char __r0, __r1, __r2; (__builtin_constant_p ( "," ) && ((size_t)(const void *)(( "," ) + 1) - (size_t)(const void *)( "," ) == 1) && (__r0 = ((const char *) ( "," ))[0], ((const char *) ( "," ))[0] != '\0') ? ((_..." ))[2], __r2 == '\0') ? __strsep_2c ( &authctxt->ktypes , __r0, __r1) : (((const char *) ( "," ))[3] == '\0' ? __strsep_3c ( &authctxt->ktypes , __r0, __r1, __r2) : __strsep_g ( &authctxt->ktypes , "," )))) : __strsep_g ( &authctxt->ktypes , "," )); }) ; | 0 |
| 2286 | ))[0] != '\0') ? ((__r1 = ((const char *) ( never executed: authctxt->active_ktype = __extension__ ({ char __r0, __r1, __r2; (__builtin_constant_p ( "," ) && ((size_t)(const void *)(( "," ) + 1) - (size_t)(const void *)( "," ) == 1) && (__r0 = ((const char *) ( "," ))[0], ((const char *) ( "," ))[0] != '\0') ? ((_..." ))[2], __r2 == '\0') ? __strsep_2c ( &authctxt->ktypes , __r0, __r1) : (((const char *) ( "," ))[3] == '\0' ? __strsep_3c ( &authctxt->ktypes , __r0, __r1, __r2) : __strsep_g ( &authctxt->ktypes , "," )))) : __strsep_g ( &authctxt->ktypes , "," )); }) ; | 0 |
| 2287 | "," never executed: authctxt->active_ktype = __extension__ ({ char __r0, __r1, __r2; (__builtin_constant_p ( "," ) && ((size_t)(const void *)(( "," ) + 1) - (size_t)(const void *)( "," ) == 1) && (__r0 = ((const char *) ( "," ))[0], ((const char *) ( "," ))[0] != '\0') ? ((_..." ))[2], __r2 == '\0') ? __strsep_2c ( &authctxt->ktypes , __r0, __r1) : (((const char *) ( "," ))[3] == '\0' ? __strsep_3c ( &authctxt->ktypes , __r0, __r1, __r2) : __strsep_g ( &authctxt->ktypes , "," )))) : __strsep_g ( &authctxt->ktypes , "," )); }) ; | 0 |
| 2288 | ))[1], ((const char *) ( never executed: authctxt->active_ktype = __extension__ ({ char __r0, __r1, __r2; (__builtin_constant_p ( "," ) && ((size_t)(const void *)(( "," ) + 1) - (size_t)(const void *)( "," ) == 1) && (__r0 = ((const char *) ( "," ))[0], ((const char *) ( "," ))[0] != '\0') ? ((_..." ))[2], __r2 == '\0') ? __strsep_2c ( &authctxt->ktypes , __r0, __r1) : (((const char *) ( "," ))[3] == '\0' ? __strsep_3c ( &authctxt->ktypes , __r0, __r1, __r2) : __strsep_g ( &authctxt->ktypes , "," )))) : __strsep_g ( &authctxt->ktypes , "," )); }) ; | 0 |
| 2289 | "," never executed: authctxt->active_ktype = __extension__ ({ char __r0, __r1, __r2; (__builtin_constant_p ( "," ) && ((size_t)(const void *)(( "," ) + 1) - (size_t)(const void *)( "," ) == 1) && (__r0 = ((const char *) ( "," ))[0], ((const char *) ( "," ))[0] != '\0') ? ((_..." ))[2], __r2 == '\0') ? __strsep_2c ( &authctxt->ktypes , __r0, __r1) : (((const char *) ( "," ))[3] == '\0' ? __strsep_3c ( &authctxt->ktypes , __r0, __r1, __r2) : __strsep_g ( &authctxt->ktypes , "," )))) : __strsep_g ( &authctxt->ktypes , "," )); }) ; | 0 |
| 2290 | ))[1] == '\0') ? __strsep_1c ( never executed: authctxt->active_ktype = __extension__ ({ char __r0, __r1, __r2; (__builtin_constant_p ( "," ) && ((size_t)(const void *)(( "," ) + 1) - (size_t)(const void *)( "," ) == 1) && (__r0 = ((const char *) ( "," ))[0], ((const char *) ( "," ))[0] != '\0') ? ((_..." ))[2], __r2 == '\0') ? __strsep_2c ( &authctxt->ktypes , __r0, __r1) : (((const char *) ( "," ))[3] == '\0' ? __strsep_3c ( &authctxt->ktypes , __r0, __r1, __r2) : __strsep_g ( &authctxt->ktypes , "," )))) : __strsep_g ( &authctxt->ktypes , "," )); }) ; | 0 |
| 2291 | &authctxt->ktypes never executed: authctxt->active_ktype = __extension__ ({ char __r0, __r1, __r2; (__builtin_constant_p ( "," ) && ((size_t)(const void *)(( "," ) + 1) - (size_t)(const void *)( "," ) == 1) && (__r0 = ((const char *) ( "," ))[0], ((const char *) ( "," ))[0] != '\0') ? ((_..." ))[2], __r2 == '\0') ? __strsep_2c ( &authctxt->ktypes , __r0, __r1) : (((const char *) ( "," ))[3] == '\0' ? __strsep_3c ( &authctxt->ktypes , __r0, __r1, __r2) : __strsep_g ( &authctxt->ktypes , "," )))) : __strsep_g ( &authctxt->ktypes , "," )); }) ; | 0 |
| 2292 | , __r0) : ((__r2 = ((const char *) ( never executed: authctxt->active_ktype = __extension__ ({ char __r0, __r1, __r2; (__builtin_constant_p ( "," ) && ((size_t)(const void *)(( "," ) + 1) - (size_t)(const void *)( "," ) == 1) && (__r0 = ((const char *) ( "," ))[0], ((const char *) ( "," ))[0] != '\0') ? ((_..." ))[2], __r2 == '\0') ? __strsep_2c ( &authctxt->ktypes , __r0, __r1) : (((const char *) ( "," ))[3] == '\0' ? __strsep_3c ( &authctxt->ktypes , __r0, __r1, __r2) : __strsep_g ( &authctxt->ktypes , "," )))) : __strsep_g ( &authctxt->ktypes , "," )); }) ; | 0 |
| 2293 | "," never executed: authctxt->active_ktype = __extension__ ({ char __r0, __r1, __r2; (__builtin_constant_p ( "," ) && ((size_t)(const void *)(( "," ) + 1) - (size_t)(const void *)( "," ) == 1) && (__r0 = ((const char *) ( "," ))[0], ((const char *) ( "," ))[0] != '\0') ? ((_..." ))[2], __r2 == '\0') ? __strsep_2c ( &authctxt->ktypes , __r0, __r1) : (((const char *) ( "," ))[3] == '\0' ? __strsep_3c ( &authctxt->ktypes , __r0, __r1, __r2) : __strsep_g ( &authctxt->ktypes , "," )))) : __strsep_g ( &authctxt->ktypes , "," )); }) ; | 0 |
| 2294 | ))[2], __r2 == '\0') ? __strsep_2c ( never executed: authctxt->active_ktype = __extension__ ({ char __r0, __r1, __r2; (__builtin_constant_p ( "," ) && ((size_t)(const void *)(( "," ) + 1) - (size_t)(const void *)( "," ) == 1) && (__r0 = ((const char *) ( "," ))[0], ((const char *) ( "," ))[0] != '\0') ? ((_..." ))[2], __r2 == '\0') ? __strsep_2c ( &authctxt->ktypes , __r0, __r1) : (((const char *) ( "," ))[3] == '\0' ? __strsep_3c ( &authctxt->ktypes , __r0, __r1, __r2) : __strsep_g ( &authctxt->ktypes , "," )))) : __strsep_g ( &authctxt->ktypes , "," )); }) ; | 0 |
| 2295 | &authctxt->ktypes never executed: authctxt->active_ktype = __extension__ ({ char __r0, __r1, __r2; (__builtin_constant_p ( "," ) && ((size_t)(const void *)(( "," ) + 1) - (size_t)(const void *)( "," ) == 1) && (__r0 = ((const char *) ( "," ))[0], ((const char *) ( "," ))[0] != '\0') ? ((_..." ))[2], __r2 == '\0') ? __strsep_2c ( &authctxt->ktypes , __r0, __r1) : (((const char *) ( "," ))[3] == '\0' ? __strsep_3c ( &authctxt->ktypes , __r0, __r1, __r2) : __strsep_g ( &authctxt->ktypes , "," )))) : __strsep_g ( &authctxt->ktypes , "," )); }) ; | 0 |
| 2296 | , __r0, __r1) : (((const char *) ( never executed: authctxt->active_ktype = __extension__ ({ char __r0, __r1, __r2; (__builtin_constant_p ( "," ) && ((size_t)(const void *)(( "," ) + 1) - (size_t)(const void *)( "," ) == 1) && (__r0 = ((const char *) ( "," ))[0], ((const char *) ( "," ))[0] != '\0') ? ((_..." ))[2], __r2 == '\0') ? __strsep_2c ( &authctxt->ktypes , __r0, __r1) : (((const char *) ( "," ))[3] == '\0' ? __strsep_3c ( &authctxt->ktypes , __r0, __r1, __r2) : __strsep_g ( &authctxt->ktypes , "," )))) : __strsep_g ( &authctxt->ktypes , "," )); }) ; | 0 |
| 2297 | "," never executed: authctxt->active_ktype = __extension__ ({ char __r0, __r1, __r2; (__builtin_constant_p ( "," ) && ((size_t)(const void *)(( "," ) + 1) - (size_t)(const void *)( "," ) == 1) && (__r0 = ((const char *) ( "," ))[0], ((const char *) ( "," ))[0] != '\0') ? ((_..." ))[2], __r2 == '\0') ? __strsep_2c ( &authctxt->ktypes , __r0, __r1) : (((const char *) ( "," ))[3] == '\0' ? __strsep_3c ( &authctxt->ktypes , __r0, __r1, __r2) : __strsep_g ( &authctxt->ktypes , "," )))) : __strsep_g ( &authctxt->ktypes , "," )); }) ; | 0 |
| 2298 | ))[3] == '\0' ? __strsep_3c ( never executed: authctxt->active_ktype = __extension__ ({ char __r0, __r1, __r2; (__builtin_constant_p ( "," ) && ((size_t)(const void *)(( "," ) + 1) - (size_t)(const void *)( "," ) == 1) && (__r0 = ((const char *) ( "," ))[0], ((const char *) ( "," ))[0] != '\0') ? ((_..." ))[2], __r2 == '\0') ? __strsep_2c ( &authctxt->ktypes , __r0, __r1) : (((const char *) ( "," ))[3] == '\0' ? __strsep_3c ( &authctxt->ktypes , __r0, __r1, __r2) : __strsep_g ( &authctxt->ktypes , "," )))) : __strsep_g ( &authctxt->ktypes , "," )); }) ; | 0 |
| 2299 | &authctxt->ktypes never executed: authctxt->active_ktype = __extension__ ({ char __r0, __r1, __r2; (__builtin_constant_p ( "," ) && ((size_t)(const void *)(( "," ) + 1) - (size_t)(const void *)( "," ) == 1) && (__r0 = ((const char *) ( "," ))[0], ((const char *) ( "," ))[0] != '\0') ? ((_..." ))[2], __r2 == '\0') ? __strsep_2c ( &authctxt->ktypes , __r0, __r1) : (((const char *) ( "," ))[3] == '\0' ? __strsep_3c ( &authctxt->ktypes , __r0, __r1, __r2) : __strsep_g ( &authctxt->ktypes , "," )))) : __strsep_g ( &authctxt->ktypes , "," )); }) ; | 0 |
| 2300 | , __r0, __r1, __r2) : __strsep_g ( never executed: authctxt->active_ktype = __extension__ ({ char __r0, __r1, __r2; (__builtin_constant_p ( "," ) && ((size_t)(const void *)(( "," ) + 1) - (size_t)(const void *)( "," ) == 1) && (__r0 = ((const char *) ( "," ))[0], ((const char *) ( "," ))[0] != '\0') ? ((_..." ))[2], __r2 == '\0') ? __strsep_2c ( &authctxt->ktypes , __r0, __r1) : (((const char *) ( "," ))[3] == '\0' ? __strsep_3c ( &authctxt->ktypes , __r0, __r1, __r2) : __strsep_g ( &authctxt->ktypes , "," )))) : __strsep_g ( &authctxt->ktypes , "," )); }) ; | 0 |
| 2301 | &authctxt->ktypes never executed: authctxt->active_ktype = __extension__ ({ char __r0, __r1, __r2; (__builtin_constant_p ( "," ) && ((size_t)(const void *)(( "," ) + 1) - (size_t)(const void *)( "," ) == 1) && (__r0 = ((const char *) ( "," ))[0], ((const char *) ( "," ))[0] != '\0') ? ((_..." ))[2], __r2 == '\0') ? __strsep_2c ( &authctxt->ktypes , __r0, __r1) : (((const char *) ( "," ))[3] == '\0' ? __strsep_3c ( &authctxt->ktypes , __r0, __r1, __r2) : __strsep_g ( &authctxt->ktypes , "," )))) : __strsep_g ( &authctxt->ktypes , "," )); }) ; | 0 |
| 2302 | , never executed: authctxt->active_ktype = __extension__ ({ char __r0, __r1, __r2; (__builtin_constant_p ( "," ) && ((size_t)(const void *)(( "," ) + 1) - (size_t)(const void *)( "," ) == 1) && (__r0 = ((const char *) ( "," ))[0], ((const char *) ( "," ))[0] != '\0') ? ((_..." ))[2], __r2 == '\0') ? __strsep_2c ( &authctxt->ktypes , __r0, __r1) : (((const char *) ( "," ))[3] == '\0' ? __strsep_3c ( &authctxt->ktypes , __r0, __r1, __r2) : __strsep_g ( &authctxt->ktypes , "," )))) : __strsep_g ( &authctxt->ktypes , "," )); }) ; | 0 |
| 2303 | "," never executed: authctxt->active_ktype = __extension__ ({ char __r0, __r1, __r2; (__builtin_constant_p ( "," ) && ((size_t)(const void *)(( "," ) + 1) - (size_t)(const void *)( "," ) == 1) && (__r0 = ((const char *) ( "," ))[0], ((const char *) ( "," ))[0] != '\0') ? ((_..." ))[2], __r2 == '\0') ? __strsep_2c ( &authctxt->ktypes , __r0, __r1) : (((const char *) ( "," ))[3] == '\0' ? __strsep_3c ( &authctxt->ktypes , __r0, __r1, __r2) : __strsep_g ( &authctxt->ktypes , "," )))) : __strsep_g ( &authctxt->ktypes , "," )); }) ; | 0 |
| 2304 | )))) : __strsep_g ( never executed: authctxt->active_ktype = __extension__ ({ char __r0, __r1, __r2; (__builtin_constant_p ( "," ) && ((size_t)(const void *)(( "," ) + 1) - (size_t)(const void *)( "," ) == 1) && (__r0 = ((const char *) ( "," ))[0], ((const char *) ( "," ))[0] != '\0') ? ((_..." ))[2], __r2 == '\0') ? __strsep_2c ( &authctxt->ktypes , __r0, __r1) : (((const char *) ( "," ))[3] == '\0' ? __strsep_3c ( &authctxt->ktypes , __r0, __r1, __r2) : __strsep_g ( &authctxt->ktypes , "," )))) : __strsep_g ( &authctxt->ktypes , "," )); }) ; | 0 |
| 2305 | &authctxt->ktypes never executed: authctxt->active_ktype = __extension__ ({ char __r0, __r1, __r2; (__builtin_constant_p ( "," ) && ((size_t)(const void *)(( "," ) + 1) - (size_t)(const void *)( "," ) == 1) && (__r0 = ((const char *) ( "," ))[0], ((const char *) ( "," ))[0] != '\0') ? ((_..." ))[2], __r2 == '\0') ? __strsep_2c ( &authctxt->ktypes , __r0, __r1) : (((const char *) ( "," ))[3] == '\0' ? __strsep_3c ( &authctxt->ktypes , __r0, __r1, __r2) : __strsep_g ( &authctxt->ktypes , "," )))) : __strsep_g ( &authctxt->ktypes , "," )); }) ; | 0 |
| 2306 | , never executed: authctxt->active_ktype = __extension__ ({ char __r0, __r1, __r2; (__builtin_constant_p ( "," ) && ((size_t)(const void *)(( "," ) + 1) - (size_t)(const void *)( "," ) == 1) && (__r0 = ((const char *) ( "," ))[0], ((const char *) ( "," ))[0] != '\0') ? ((_..." ))[2], __r2 == '\0') ? __strsep_2c ( &authctxt->ktypes , __r0, __r1) : (((const char *) ( "," ))[3] == '\0' ? __strsep_3c ( &authctxt->ktypes , __r0, __r1, __r2) : __strsep_g ( &authctxt->ktypes , "," )))) : __strsep_g ( &authctxt->ktypes , "," )); }) ; | 0 |
| 2307 | "," never executed: authctxt->active_ktype = __extension__ ({ char __r0, __r1, __r2; (__builtin_constant_p ( "," ) && ((size_t)(const void *)(( "," ) + 1) - (size_t)(const void *)( "," ) == 1) && (__r0 = ((const char *) ( "," ))[0], ((const char *) ( "," ))[0] != '\0') ? ((_..." ))[2], __r2 == '\0') ? __strsep_2c ( &authctxt->ktypes , __r0, __r1) : (((const char *) ( "," ))[3] == '\0' ? __strsep_3c ( &authctxt->ktypes , __r0, __r1, __r2) : __strsep_g ( &authctxt->ktypes , "," )))) : __strsep_g ( &authctxt->ktypes , "," )); }) ; | 0 |
| 2308 | )); }) never executed: authctxt->active_ktype = __extension__ ({ char __r0, __r1, __r2; (__builtin_constant_p ( "," ) && ((size_t)(const void *)(( "," ) + 1) - (size_t)(const void *)( "," ) == 1) && (__r0 = ((const char *) ( "," ))[0], ((const char *) ( "," ))[0] != '\0') ? ((_..." ))[2], __r2 == '\0') ? __strsep_2c ( &authctxt->ktypes , __r0, __r1) : (((const char *) ( "," ))[3] == '\0' ? __strsep_3c ( &authctxt->ktypes , __r0, __r1, __r2) : __strsep_g ( &authctxt->ktypes , "," )))) : __strsep_g ( &authctxt->ktypes , "," )); }) ; | 0 |
| 2309 | ; never executed: authctxt->active_ktype = __extension__ ({ char __r0, __r1, __r2; (__builtin_constant_p ( "," ) && ((size_t)(const void *)(( "," ) + 1) - (size_t)(const void *)( "," ) == 1) && (__r0 = ((const char *) ( "," ))[0], ((const char *) ( "," ))[0] != '\0') ? ((_..." ))[2], __r2 == '\0') ? __strsep_2c ( &authctxt->ktypes , __r0, __r1) : (((const char *) ( "," ))[3] == '\0' ? __strsep_3c ( &authctxt->ktypes , __r0, __r1, __r2) : __strsep_g ( &authctxt->ktypes , "," )))) : __strsep_g ( &authctxt->ktypes , "," )); }) ; | 0 |
| 2310 | if (authctxt->active_ktype == | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2311 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2312 | || | - |
| 2313 | *| TRUE | never evaluated | | FALSE | never evaluated |
authctxt->active_ktype == '\0'| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 2314 | break; never executed: break; | 0 |
| 2315 | debug3("%s: trying key type %s", __func__, | - |
| 2316 | authctxt->active_ktype); | - |
| 2317 | | - |
| 2318 | | - |
| 2319 | private = | - |
| 2320 | ((void *)0) | - |
| 2321 | ; | - |
| 2322 | for (i = 0; i < authctxt->sensitive->nkeys| TRUE | never evaluated | | FALSE | never evaluated |
; i++) { | 0 |
| 2323 | if (authctxt->sensitive->keys[i] == | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2324 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2325 | || | - |
| 2326 | authctxt->sensitive->keys[i]->type == KEY_UNSPEC| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 2327 | continue; never executed: continue; | 0 |
| 2328 | if (match_pattern_list(| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2329 | sshkey_ssh_name(authctxt->sensitive->keys[i]),| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2330 | authctxt->active_ktype, 0) != 1| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 2331 | continue; never executed: continue; | 0 |
| 2332 | | - |
| 2333 | private = authctxt->sensitive->keys[i]; | - |
| 2334 | authctxt->sensitive->keys[i] = | - |
| 2335 | ((void *)0) | - |
| 2336 | ; | - |
| 2337 | break; never executed: break; | 0 |
| 2338 | } | - |
| 2339 | | - |
| 2340 | if (private| TRUE | never evaluated | | FALSE | never evaluated |
!= | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2341 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2342 | ) | - |
| 2343 | break; never executed: break; | 0 |
| 2344 | | - |
| 2345 | authctxt->active_ktype = | - |
| 2346 | ((void *)0) | - |
| 2347 | ; | - |
| 2348 | } never executed: end of block | 0 |
| 2349 | if (private| TRUE | never evaluated | | FALSE | never evaluated |
== | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2350 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2351 | ) { | - |
| 2352 | free(authctxt->oktypes); | - |
| 2353 | authctxt->oktypes = authctxt->ktypes = | - |
| 2354 | ((void *)0) | - |
| 2355 | ; | - |
| 2356 | authctxt->active_ktype = | - |
| 2357 | ((void *)0) | - |
| 2358 | ; | - |
| 2359 | debug("No more client hostkeys for hostbased authentication."); | - |
| 2360 | goto never executed: goto out; out;never executed: goto out; | 0 |
| 2361 | } | - |
| 2362 | | - |
| 2363 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
fp = sshkey_fingerprint(private, options.fingerprint_hash,| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2364 | SSH_FP_DEFAULT)) == | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2365 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2366 | ) { | - |
| 2367 | error("%s: sshkey_fingerprint failed", __func__); | - |
| 2368 | goto never executed: goto out; out;never executed: goto out; | 0 |
| 2369 | } | - |
| 2370 | debug("%s: trying hostkey %s %s", | - |
| 2371 | __func__, sshkey_ssh_name(private), fp); | - |
| 2372 | | - |
| 2373 | | - |
| 2374 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
lname = get_local_name(ssh_packet_get_connection_in(active_state))) == | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2375 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2376 | ) { | - |
| 2377 | error("%s: cannot get local ipaddr/name", __func__); | - |
| 2378 | goto never executed: goto out; out;never executed: goto out; | 0 |
| 2379 | } | - |
| 2380 | | - |
| 2381 | | - |
| 2382 | xasprintf(&chost, "%s.", lname); | - |
| 2383 | debug2("%s: chost %s", __func__, chost); | - |
| 2384 | | - |
| 2385 | | - |
| 2386 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
b = sshbuf_new()) == | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2387 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2388 | ) { | - |
| 2389 | error("%s: sshbuf_new failed", __func__); | - |
| 2390 | goto never executed: goto out; out;never executed: goto out; | 0 |
| 2391 | } | - |
| 2392 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
r = sshkey_to_blob(private, &keyblob, &keylen)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 2393 | error("%s: sshkey_to_blob: %s", __func__, ssh_err(r)); | - |
| 2394 | goto never executed: goto out; out;never executed: goto out; | 0 |
| 2395 | } | - |
| 2396 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
r = sshbuf_put_string(b, session_id2, session_id2_len)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 2397 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshbuf_put_u8(b, 50)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 2398 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshbuf_put_cstring(b, authctxt->server_user)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 2399 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshbuf_put_cstring(b, authctxt->service)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 2400 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshbuf_put_cstring(b, authctxt->method->name)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 2401 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshbuf_put_cstring(b, sshkey_ssh_name(private))) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 2402 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshbuf_put_string(b, keyblob, keylen)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 2403 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshbuf_put_cstring(b, chost)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 2404 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshbuf_put_cstring(b, authctxt->local_user)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 2405 | error("%s: buffer error: %s", __func__, ssh_err(r)); | - |
| 2406 | goto never executed: goto out; out;never executed: goto out; | 0 |
| 2407 | } | - |
| 2408 | | - |
| 2409 | | - |
| 2410 | | - |
| 2411 | | - |
| 2412 | r = ssh_keysign(private, &sig, &siglen, | - |
| 2413 | sshbuf_ptr(b), sshbuf_len(b)); | - |
| 2414 | if (r != 0| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 2415 | error("sign using hostkey %s %s failed", | - |
| 2416 | sshkey_ssh_name(private), fp); | - |
| 2417 | goto never executed: goto out; out;never executed: goto out; | 0 |
| 2418 | } | - |
| 2419 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_start(ssh, 50)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 2420 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_put_cstring(ssh, authctxt->server_user)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 2421 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_put_cstring(ssh, authctxt->service)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 2422 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_put_cstring(ssh, authctxt->method->name)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 2423 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_put_cstring(ssh, sshkey_ssh_name(private))) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 2424 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_put_string(ssh, keyblob, keylen)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 2425 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_put_cstring(ssh, chost)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 2426 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_put_cstring(ssh, authctxt->local_user)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 2427 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_put_string(ssh, sig, siglen)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
|| | 0 |
| 2428 | (| TRUE | never evaluated | | FALSE | never evaluated |
r = sshpkt_send(ssh)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 2429 | error("%s: packet error: %s", __func__, ssh_err(r)); | - |
| 2430 | goto never executed: goto out; out;never executed: goto out; | 0 |
| 2431 | } | - |
| 2432 | success = 1; | - |
| 2433 | | - |
| 2434 | out: code before this statement never executed: out: | 0 |
| 2435 | if (sig != | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2436 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2437 | ) | - |
| 2438 | freezero(sig, siglen); never executed: freezero(sig, siglen); | 0 |
| 2439 | free(keyblob); | - |
| 2440 | free(lname); | - |
| 2441 | free(fp); | - |
| 2442 | free(chost); | - |
| 2443 | sshkey_free(private); | - |
| 2444 | sshbuf_free(b); | - |
| 2445 | | - |
| 2446 | return never executed: return success; success;never executed: return success; | 0 |
| 2447 | } | - |
| 2448 | | - |
| 2449 | | - |
| 2450 | | - |
| 2451 | | - |
| 2452 | | - |
| 2453 | | - |
| 2454 | | - |
| 2455 | static int | - |
| 2456 | authmethod_is_enabled(Authmethod *method) | - |
| 2457 | { | - |
| 2458 | if (method == | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2459 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2460 | ) | - |
| 2461 | return never executed: return 0; 0;never executed: return 0; | 0 |
| 2462 | | - |
| 2463 | if (method->enabled == | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2464 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2465 | || *| TRUE | never evaluated | | FALSE | never evaluated |
method->enabled == 0| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 2466 | return never executed: return 0; 0;never executed: return 0; | 0 |
| 2467 | | - |
| 2468 | if (method->batch_flag != | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2469 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2470 | && *| TRUE | never evaluated | | FALSE | never evaluated |
method->batch_flag != 0| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 2471 | return never executed: return 0; 0;never executed: return 0; | 0 |
| 2472 | return never executed: return 1; 1;never executed: return 1; | 0 |
| 2473 | } | - |
| 2474 | | - |
| 2475 | static Authmethod * | - |
| 2476 | authmethod_lookup(const char *name) | - |
| 2477 | { | - |
| 2478 | Authmethod *method = | - |
| 2479 | ((void *)0) | - |
| 2480 | ; | - |
| 2481 | if (name != | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2482 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2483 | ) | - |
| 2484 | for (method = authmethods; method->name != | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2485 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2486 | ; method++) | - |
| 2487 | if ( | - |
| 2488 | __extension__ ({ size_t __s1_len, __s2_len; (__builtin_constant_p (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2489 | name| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2490 | ) && __builtin_constant_p (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2491 | method->name| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2492 | ) && (__s1_len = __builtin_strlen (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2493 | name| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2494 | ), __s2_len = __builtin_strlen (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2495 | method->name| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2496 | ), (!((size_t)(const void *)((| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2497 | name| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2498 | ) + 1) - (size_t)(const void *)(| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2499 | name| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2500 | ) == 1) || __s1_len >= 4) && (!((size_t)(const void *)((| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2501 | method->name| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2502 | ) + 1) - (size_t)(const void *)(| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2503 | method->name| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2504 | ) == 1) || __s2_len >= 4)) ? __builtin_strcmp (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2505 | name| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2506 | , | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2507 | method->name| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2508 | ) : (__builtin_constant_p (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2509 | name| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2510 | ) && ((size_t)(const void *)((| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2511 | name| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2512 | ) + 1) - (size_t)(const void *)(| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2513 | name| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2514 | ) == 1) && (__s1_len = __builtin_strlen (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2515 | name| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2516 | ), __s1_len < 4) ? (__builtin_constant_p (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2517 | method->name| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2518 | ) && ((size_t)(const void *)((| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2519 | method->name| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2520 | ) + 1) - (size_t)(const void *)(| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2521 | method->name| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2522 | ) == 1) ? __builtin_strcmp (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2523 | name| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2524 | , | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2525 | method->name| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2526 | ) : (__extension__ ({ const unsigned char *__s2 = (const unsigned char *) (const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2527 | method->name| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2528 | ); int __result = (((const unsigned char *) (const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2529 | name| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2530 | ))[0] - __s2[0]); if (__s1_len > 0| TRUE | never evaluated | | FALSE | never evaluated |
&& __result == 0| TRUE | never evaluated | | FALSE | never evaluated |
) { __result = (((const unsigned char *) (const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2531 | name| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2532 | ))[1] - __s2[1]); if (__s1_len > 1| TRUE | never evaluated | | FALSE | never evaluated |
&& __result == 0| TRUE | never evaluated | | FALSE | never evaluated |
) { __result = (((const unsigned char *) (const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2533 | name| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2534 | ))[2] - __s2[2]); if (__s1_len > 2| TRUE | never evaluated | | FALSE | never evaluated |
&& __result == 0| TRUE | never evaluated | | FALSE | never evaluated |
) __result = (((const unsigned char *) (const char *) (never executed: __result = (((const unsigned char *) (const char *) ( name ))[3] - __s2[3]); | 0 |
| 2535 | name| TRUE | never evaluated | | FALSE | never evaluated |
never executed: __result = (((const unsigned char *) (const char *) ( name ))[3] - __s2[3]); | 0 |
| 2536 | ))[3] - __s2[3]); } } __result; }))) : (__builtin_constant_p (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2537 | method->name| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2538 | ) && ((size_t)(const void *)((| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2539 | method->name| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2540 | ) + 1) - (size_t)(const void *)(| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2541 | method->name| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2542 | ) == 1) && (__s2_len = __builtin_strlen (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2543 | method->name| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2544 | ), __s2_len < 4) ? (__builtin_constant_p (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2545 | name| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2546 | ) && ((size_t)(const void *)((| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2547 | name| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2548 | ) + 1) - (size_t)(const void *)(| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2549 | name| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2550 | ) == 1) ? __builtin_strcmp (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2551 | name| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2552 | , | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2553 | method->name| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2554 | ) : -(__extension__ ({ const unsigned char *__s2 = (const unsigned char *) (const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2555 | name| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2556 | ); int __result = (((const unsigned char *) (const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2557 | method->name| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2558 | ))[0] - __s2[0]); if (__s2_len > 0| TRUE | never evaluated | | FALSE | never evaluated |
&& __result == 0| TRUE | never evaluated | | FALSE | never evaluated |
) { __result = (((const unsigned char *) (const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2559 | method->name| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2560 | ))[1] - __s2[1]); if (__s2_len > 1| TRUE | never evaluated | | FALSE | never evaluated |
&& __result == 0| TRUE | never evaluated | | FALSE | never evaluated |
) { __result = (((const unsigned char *) (const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2561 | method->name| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2562 | ))[2] - __s2[2]); if (__s2_len > 2| TRUE | never evaluated | | FALSE | never evaluated |
&& __result == 0| TRUE | never evaluated | | FALSE | never evaluated |
) __result = (((const unsigned char *) (const char *) (never executed: __result = (((const unsigned char *) (const char *) ( method->name ))[3] - __s2[3]); | 0 |
| 2563 | method->name| TRUE | never evaluated | | FALSE | never evaluated |
never executed: __result = (((const unsigned char *) (const char *) ( method->name ))[3] - __s2[3]); | 0 |
| 2564 | ))[3] - __s2[3]); } } __result; }))) : __builtin_strcmp (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2565 | name| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2566 | , | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2567 | method->name| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2568 | )))); }) | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2569 | == 0| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 2570 | return never executed: return method; method;never executed: return method; | 0 |
| 2571 | debug2("Unrecognized authentication method name: %s", name ? name : "NULL"); | - |
| 2572 | return never executed: return ((void *)0) ; never executed: return ((void *)0) ; | 0 |
| 2573 | ((void *)0) never executed: return ((void *)0) ; | 0 |
| 2574 | ; never executed: return ((void *)0) ; | 0 |
| 2575 | } | - |
| 2576 | | - |
| 2577 | | - |
| 2578 | static Authmethod *current = | - |
| 2579 | ((void *)0) | - |
| 2580 | ; | - |
| 2581 | static char *supported = | - |
| 2582 | ((void *)0) | - |
| 2583 | ; | - |
| 2584 | static char *preferred = | - |
| 2585 | ((void *)0) | - |
| 2586 | ; | - |
| 2587 | | - |
| 2588 | | - |
| 2589 | | - |
| 2590 | | - |
| 2591 | | - |
| 2592 | | - |
| 2593 | static Authmethod * | - |
| 2594 | authmethod_get(char *authlist) | - |
| 2595 | { | - |
| 2596 | char *name = | - |
| 2597 | ((void *)0) | - |
| 2598 | ; | - |
| 2599 | u_int next; | - |
| 2600 | | - |
| 2601 | | - |
| 2602 | if (authlist == | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2603 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2604 | || strlen(authlist) == 0| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 2605 | authlist = options.preferred_authentications; never executed: authlist = options.preferred_authentications; | 0 |
| 2606 | | - |
| 2607 | if (supported == | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2608 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2609 | || | - |
| 2610 | __extension__ ({ size_t __s1_len, __s2_len; (__builtin_constant_p (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2611 | authlist| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2612 | ) && __builtin_constant_p (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2613 | supported| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2614 | ) && (__s1_len = __builtin_strlen (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2615 | authlist| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2616 | ), __s2_len = __builtin_strlen (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2617 | supported| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2618 | ), (!((size_t)(const void *)((| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2619 | authlist| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2620 | ) + 1) - (size_t)(const void *)(| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2621 | authlist| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2622 | ) == 1) || __s1_len >= 4) && (!((size_t)(const void *)((| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2623 | supported| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2624 | ) + 1) - (size_t)(const void *)(| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2625 | supported| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2626 | ) == 1) || __s2_len >= 4)) ? __builtin_strcmp (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2627 | authlist| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2628 | , | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2629 | supported| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2630 | ) : (__builtin_constant_p (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2631 | authlist| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2632 | ) && ((size_t)(const void *)((| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2633 | authlist| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2634 | ) + 1) - (size_t)(const void *)(| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2635 | authlist| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2636 | ) == 1) && (__s1_len = __builtin_strlen (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2637 | authlist| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2638 | ), __s1_len < 4) ? (__builtin_constant_p (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2639 | supported| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2640 | ) && ((size_t)(const void *)((| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2641 | supported| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2642 | ) + 1) - (size_t)(const void *)(| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2643 | supported| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2644 | ) == 1) ? __builtin_strcmp (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2645 | authlist| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2646 | , | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2647 | supported| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2648 | ) : (__extension__ ({ const unsigned char *__s2 = (const unsigned char *) (const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2649 | supported| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2650 | ); int __result = (((const unsigned char *) (const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2651 | authlist| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2652 | ))[0] - __s2[0]); if (__s1_len > 0| TRUE | never evaluated | | FALSE | never evaluated |
&& __result == 0| TRUE | never evaluated | | FALSE | never evaluated |
) { __result = (((const unsigned char *) (const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2653 | authlist| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2654 | ))[1] - __s2[1]); if (__s1_len > 1| TRUE | never evaluated | | FALSE | never evaluated |
&& __result == 0| TRUE | never evaluated | | FALSE | never evaluated |
) { __result = (((const unsigned char *) (const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2655 | authlist| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2656 | ))[2] - __s2[2]); if (__s1_len > 2| TRUE | never evaluated | | FALSE | never evaluated |
&& __result == 0| TRUE | never evaluated | | FALSE | never evaluated |
) __result = (((const unsigned char *) (const char *) (never executed: __result = (((const unsigned char *) (const char *) ( authlist ))[3] - __s2[3]); | 0 |
| 2657 | authlist| TRUE | never evaluated | | FALSE | never evaluated |
never executed: __result = (((const unsigned char *) (const char *) ( authlist ))[3] - __s2[3]); | 0 |
| 2658 | ))[3] - __s2[3]); } } __result; }))) : (__builtin_constant_p (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2659 | supported| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2660 | ) && ((size_t)(const void *)((| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2661 | supported| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2662 | ) + 1) - (size_t)(const void *)(| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2663 | supported| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2664 | ) == 1) && (__s2_len = __builtin_strlen (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2665 | supported| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2666 | ), __s2_len < 4) ? (__builtin_constant_p (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2667 | authlist| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2668 | ) && ((size_t)(const void *)((| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2669 | authlist| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2670 | ) + 1) - (size_t)(const void *)(| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2671 | authlist| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2672 | ) == 1) ? __builtin_strcmp (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2673 | authlist| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2674 | , | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2675 | supported| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2676 | ) : -(__extension__ ({ const unsigned char *__s2 = (const unsigned char *) (const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2677 | authlist| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2678 | ); int __result = (((const unsigned char *) (const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2679 | supported| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2680 | ))[0] - __s2[0]); if (__s2_len > 0| TRUE | never evaluated | | FALSE | never evaluated |
&& __result == 0| TRUE | never evaluated | | FALSE | never evaluated |
) { __result = (((const unsigned char *) (const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2681 | supported| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2682 | ))[1] - __s2[1]); if (__s2_len > 1| TRUE | never evaluated | | FALSE | never evaluated |
&& __result == 0| TRUE | never evaluated | | FALSE | never evaluated |
) { __result = (((const unsigned char *) (const char *) (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2683 | supported| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2684 | ))[2] - __s2[2]); if (__s2_len > 2| TRUE | never evaluated | | FALSE | never evaluated |
&& __result == 0| TRUE | never evaluated | | FALSE | never evaluated |
) __result = (((const unsigned char *) (const char *) (never executed: __result = (((const unsigned char *) (const char *) ( supported ))[3] - __s2[3]); | 0 |
| 2685 | supported| TRUE | never evaluated | | FALSE | never evaluated |
never executed: __result = (((const unsigned char *) (const char *) ( supported ))[3] - __s2[3]); | 0 |
| 2686 | ))[3] - __s2[3]); } } __result; }))) : __builtin_strcmp (| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2687 | authlist| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2688 | , | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2689 | supported| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2690 | )))); }) | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2691 | != 0| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 2692 | debug3("start over, passed a different list %s", authlist); | - |
| 2693 | free(supported); | - |
| 2694 | supported = xstrdup(authlist); | - |
| 2695 | preferred = options.preferred_authentications; | - |
| 2696 | debug3("preferred %s", preferred); | - |
| 2697 | current = | - |
| 2698 | ((void *)0) | - |
| 2699 | ; | - |
| 2700 | } never executed: end of block else if (current != | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2701 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2702 | && authmethod_is_enabled(current)| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 2703 | return never executed: return current; current;never executed: return current; | 0 |
| 2704 | | - |
| 2705 | for (;;) { | - |
| 2706 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
name = match_list(preferred, supported, &next)) == | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2707 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2708 | ) { | - |
| 2709 | debug("No more authentication methods to try."); | - |
| 2710 | current = | - |
| 2711 | ((void *)0) | - |
| 2712 | ; | - |
| 2713 | return never executed: return ((void *)0) ; never executed: return ((void *)0) ; | 0 |
| 2714 | ((void *)0) never executed: return ((void *)0) ; | 0 |
| 2715 | ; never executed: return ((void *)0) ; | 0 |
| 2716 | } | - |
| 2717 | preferred += next; | - |
| 2718 | debug3("authmethod_lookup %s", name); | - |
| 2719 | debug3("remaining preferred: %s", preferred); | - |
| 2720 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
current = authmethod_lookup(name)) != | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2721 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2722 | && | - |
| 2723 | authmethod_is_enabled(current)| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 2724 | debug3("authmethod_is_enabled %s", name); | - |
| 2725 | debug("Next authentication method: %s", name); | - |
| 2726 | free(name); | - |
| 2727 | return never executed: return current; current;never executed: return current; | 0 |
| 2728 | } | - |
| 2729 | free(name); | - |
| 2730 | } never executed: end of block | 0 |
| 2731 | } never executed: end of block | 0 |
| 2732 | | - |
| 2733 | static char * | - |
| 2734 | authmethods_get(void) | - |
| 2735 | { | - |
| 2736 | Authmethod *method = | - |
| 2737 | ((void *)0) | - |
| 2738 | ; | - |
| 2739 | struct sshbuf *b; | - |
| 2740 | char *list; | - |
| 2741 | int r; | - |
| 2742 | | - |
| 2743 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
b = sshbuf_new()) == | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2744 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2745 | ) | - |
| 2746 | fatal("%s: sshbuf_new failed", __func__); never executed: fatal("%s: sshbuf_new failed", __func__); | 0 |
| 2747 | for (method = authmethods; method->name != | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2748 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2749 | ; method++) { | - |
| 2750 | if (authmethod_is_enabled(method)| TRUE | never evaluated | | FALSE | never evaluated |
) { | 0 |
| 2751 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
r = sshbuf_putf(b, "%s%s",| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2752 | sshbuf_len(b) ? "," : "", method->name)) != 0| TRUE | never evaluated | | FALSE | never evaluated |
) | 0 |
| 2753 | fatal("%s: buffer error: %s", never executed: fatal("%s: buffer error: %s", __func__, ssh_err(r)); | 0 |
| 2754 | __func__, ssh_err(r)); never executed: fatal("%s: buffer error: %s", __func__, ssh_err(r)); | 0 |
| 2755 | } never executed: end of block | 0 |
| 2756 | } never executed: end of block | 0 |
| 2757 | if ((| TRUE | never evaluated | | FALSE | never evaluated |
list = sshbuf_dup_string(b)) == | TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2758 | ((void *)0)| TRUE | never evaluated | | FALSE | never evaluated |
| 0 |
| 2759 | ) | - |
| 2760 | fatal("%s: sshbuf_dup_string failed", __func__); never executed: fatal("%s: sshbuf_dup_string failed", __func__); | 0 |
| 2761 | sshbuf_free(b); | - |
| 2762 | return never executed: return list; list;never executed: return list; | 0 |
| 2763 | } | - |
| | |