Home | History | Annotate | Download | only in common
      1      0    stevel /*
      2      0    stevel  * Copyright (c) 1999, 2000, 2001, 2002 Markus Friedl.  All rights reserved.
      3      0    stevel  *
      4      0    stevel  * Redistribution and use in source and binary forms, with or without
      5      0    stevel  * modification, are permitted provided that the following conditions
      6      0    stevel  * are met:
      7      0    stevel  * 1. Redistributions of source code must retain the above copyright
      8      0    stevel  *    notice, this list of conditions and the following disclaimer.
      9      0    stevel  * 2. Redistributions in binary form must reproduce the above copyright
     10      0    stevel  *    notice, this list of conditions and the following disclaimer in the
     11      0    stevel  *    documentation and/or other materials provided with the distribution.
     12      0    stevel  *
     13      0    stevel  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
     14      0    stevel  * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
     15      0    stevel  * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
     16      0    stevel  * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
     17      0    stevel  * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
     18      0    stevel  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
     19      0    stevel  * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
     20      0    stevel  * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
     21      0    stevel  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
     22      0    stevel  * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
     23      0    stevel  */
     24      0    stevel /*
     25   9600  Nobutomo  * Copyright 2009 Sun Microsystems, Inc.  All rights reserved.
     26      0    stevel  * Use is subject to license terms.
     27      0    stevel  */
     28      0    stevel 
     29      0    stevel #include "includes.h"
     30      0    stevel RCSID("$OpenBSD: compat.c,v 1.65 2002/09/27 10:42:09 mickey Exp $");
     31      0    stevel 
     32      0    stevel #include "buffer.h"
     33      0    stevel #include "packet.h"
     34      0    stevel #include "xmalloc.h"
     35      0    stevel #include "compat.h"
     36      0    stevel #include "log.h"
     37      0    stevel #include "match.h"
     38      0    stevel 
     39      0    stevel int compat13 = 0;
     40      0    stevel int compat20 = 0;
     41   9600  Nobutomo uint32_t datafellows = 0;
     42      0    stevel 
     43      0    stevel void
     44      0    stevel enable_compat20(void)
     45      0    stevel {
     46      0    stevel 	debug("Enabling compatibility mode for protocol 2.0");
     47      0    stevel 	compat20 = 1;
     48      0    stevel }
     49      0    stevel void
     50      0    stevel enable_compat13(void)
     51      0    stevel {
     52      0    stevel 	debug("Enabling compatibility mode for protocol 1.3");
     53      0    stevel 	compat13 = 1;
     54      0    stevel }
     55      0    stevel /* datafellows bug compatibility */
     56      0    stevel void
     57      0    stevel compat_datafellows(const char *version)
     58      0    stevel {
     59      0    stevel 	int i;
     60      0    stevel 	static struct {
     61      0    stevel 		char	*pat;
     62   9600  Nobutomo 		uint32_t bugs;
     63      0    stevel 	} check[] = {
     64      0    stevel 		{ "OpenSSH-2.0*,"
     65      0    stevel 		  "OpenSSH-2.1*,"
     66      0    stevel 		  "OpenSSH_2.1*,"
     67      0    stevel 		  "OpenSSH_2.2*",	SSH_OLD_SESSIONID|SSH_BUG_BANNER|
     68      0    stevel 					SSH_OLD_DHGEX|SSH_BUG_NOREKEY|
     69   5334  jp161948 					SSH_BUG_EXTEOF|SSH_OLD_FORWARD_ADDR},
     70      0    stevel 		{ "OpenSSH_2.3.0*",	SSH_BUG_BANNER|SSH_BUG_BIGENDIANAES|
     71      0    stevel 					SSH_OLD_DHGEX|SSH_BUG_NOREKEY|
     72   5334  jp161948 					SSH_BUG_EXTEOF|SSH_OLD_FORWARD_ADDR},
     73      0    stevel 		{ "OpenSSH_2.3.*",	SSH_BUG_BIGENDIANAES|SSH_OLD_DHGEX|
     74   5334  jp161948 					SSH_BUG_NOREKEY|SSH_BUG_EXTEOF|
     75   5334  jp161948 					SSH_OLD_FORWARD_ADDR},
     76      0    stevel 		{ "OpenSSH_2.5.0p1*,"
     77      0    stevel 		  "OpenSSH_2.5.1p1*",
     78      0    stevel 					SSH_BUG_BIGENDIANAES|SSH_OLD_DHGEX|
     79      0    stevel 					SSH_BUG_NOREKEY|SSH_BUG_EXTEOF|
     80   5334  jp161948 					SSH_OLD_GSSAPI|SSH_OLD_FORWARD_ADDR},
     81      0    stevel 		{ "OpenSSH_2.5.0*,"
     82      0    stevel 		  "OpenSSH_2.5.1*,"
     83      0    stevel 		  "OpenSSH_2.5.2*",	SSH_OLD_DHGEX|SSH_BUG_NOREKEY|
     84   5334  jp161948 					SSH_BUG_EXTEOF|SSH_OLD_FORWARD_ADDR},
     85   5334  jp161948 		{ "OpenSSH_2.5.3*",	SSH_BUG_NOREKEY|SSH_BUG_EXTEOF|
     86   5334  jp161948 					SSH_OLD_FORWARD_ADDR},
     87      0    stevel 		{ "OpenSSH_2.9p*",      SSH_BUG_EXTEOF|SSH_OLD_GSSAPI|
     88   5334  jp161948 					SSH_BUG_GSSKEX_HOSTKEY|SSH_OLD_FORWARD_ADDR},
     89      0    stevel 		{ "OpenSSH_2.*,"
     90      0    stevel 		  "OpenSSH_3.0*,"
     91   5334  jp161948 		  "OpenSSH_3.1*",       SSH_BUG_EXTEOF|SSH_OLD_FORWARD_ADDR|
     92   5334  jp161948 		  			SSH_OLD_GSSAPI|SSH_BUG_GSSAPI_BER|
     93      0    stevel 					SSH_BUG_GSSKEX_HOSTKEY},
     94      0    stevel 		{ "OpenSSH_3.2*,"
     95      0    stevel 		  "OpenSSH_3.3*,"
     96      0    stevel 		  "OpenSSH_3.4*,"
     97      0    stevel 		  "OpenSSH_3.5*",       SSH_BUG_GSSAPI_BER|SSH_OLD_GSSAPI|
     98   5334  jp161948 					SSH_BUG_GSSKEX_HOSTKEY|SSH_OLD_FORWARD_ADDR},
     99      0    stevel 		{ "OpenSSH_3.6*,"
    100      0    stevel 		  "OpenSSH_3.7*,"
    101   5334  jp161948 		  "OpenSSH_3.8*",	SSH_BUG_GSSKEX_HOSTKEY|SSH_OLD_FORWARD_ADDR},
    102   5334  jp161948 		{ "OpenSSH_3.*",	SSH_OLD_FORWARD_ADDR},
    103      0    stevel 		{ "OpenSSH*",		0 },
    104      0    stevel 		{ "Sun_SSH_1.0.*",	SSH_BUG_NOREKEY|
    105   5334  jp161948 					SSH_BUG_LOCALES_NOT_LANGTAGS|SSH_OLD_FORWARD_ADDR},
    106      0    stevel 		{ "Sun_SSH_1.0*",	SSH_BUG_NOREKEY|SSH_BUG_EXTEOF|
    107   5334  jp161948 					SSH_BUG_LOCALES_NOT_LANGTAGS|SSH_OLD_FORWARD_ADDR},
    108   9600  Nobutomo 		{ "Sun_SSH_1.1.1*",	SSH_OLD_FORWARD_ADDR|SSH_BUG_STRING_ENCODING},
    109   9600  Nobutomo 		{ "Sun_SSH_1.1.2*",	SSH_OLD_FORWARD_ADDR},
    110   9600  Nobutomo 		{ "Sun_SSH_1.1*",	SSH_OLD_FORWARD_ADDR|SSH_BUG_STRING_ENCODING},
    111   9600  Nobutomo 		{ "Sun_SSH_1.2*",	SSH_BUG_STRING_ENCODING},
    112   9600  Nobutomo 		{ "Sun_SSH_1.3*",	SSH_BUG_STRING_ENCODING},
    113   9600  Nobutomo 		{ "Sun_SSH_1.4*",	0 },
    114  10515       Jan 		{ "Sun_SSH_1.5*",	0 },
    115   8298       Jan 		{ "Sun_SSH_*",		0 },
    116      0    stevel 		{ "*MindTerm*",		0 },
    117      0    stevel 		{ "2.1.0*",		SSH_BUG_SIGBLOB|SSH_BUG_HMAC|
    118      0    stevel 					SSH_OLD_SESSIONID|SSH_BUG_DEBUG|
    119      0    stevel 					SSH_BUG_RSASIGMD5|SSH_BUG_HBSERVICE|
    120      0    stevel 					SSH_BUG_FIRSTKEX },
    121      0    stevel 		{ "2.1 *",		SSH_BUG_SIGBLOB|SSH_BUG_HMAC|
    122      0    stevel 					SSH_OLD_SESSIONID|SSH_BUG_DEBUG|
    123      0    stevel 					SSH_BUG_RSASIGMD5|SSH_BUG_HBSERVICE|
    124      0    stevel 					SSH_BUG_FIRSTKEX },
    125      0    stevel 		{ "2.0.13*,"
    126      0    stevel 		  "2.0.14*,"
    127      0    stevel 		  "2.0.15*,"
    128      0    stevel 		  "2.0.16*,"
    129      0    stevel 		  "2.0.17*,"
    130      0    stevel 		  "2.0.18*,"
    131      0    stevel 		  "2.0.19*",		SSH_BUG_SIGBLOB|SSH_BUG_HMAC|
    132      0    stevel 					SSH_OLD_SESSIONID|SSH_BUG_DEBUG|
    133      0    stevel 					SSH_BUG_PKSERVICE|SSH_BUG_X11FWD|
    134      0    stevel 					SSH_BUG_PKOK|SSH_BUG_RSASIGMD5|
    135      0    stevel 					SSH_BUG_HBSERVICE|SSH_BUG_OPENFAILURE|
    136      0    stevel 					SSH_BUG_DUMMYCHAN|SSH_BUG_FIRSTKEX },
    137      0    stevel 		{ "2.0.11*,"
    138      0    stevel 		  "2.0.12*",		SSH_BUG_SIGBLOB|SSH_BUG_HMAC|
    139      0    stevel 					SSH_OLD_SESSIONID|SSH_BUG_DEBUG|
    140      0    stevel 					SSH_BUG_PKSERVICE|SSH_BUG_X11FWD|
    141      0    stevel 					SSH_BUG_PKAUTH|SSH_BUG_PKOK|
    142      0    stevel 					SSH_BUG_RSASIGMD5|SSH_BUG_OPENFAILURE|
    143      0    stevel 					SSH_BUG_DUMMYCHAN|SSH_BUG_FIRSTKEX },
    144      0    stevel 		{ "2.0.*",		SSH_BUG_SIGBLOB|SSH_BUG_HMAC|
    145      0    stevel 					SSH_OLD_SESSIONID|SSH_BUG_DEBUG|
    146      0    stevel 					SSH_BUG_PKSERVICE|SSH_BUG_X11FWD|
    147      0    stevel 					SSH_BUG_PKAUTH|SSH_BUG_PKOK|
    148      0    stevel 					SSH_BUG_RSASIGMD5|SSH_BUG_OPENFAILURE|
    149      0    stevel 					SSH_BUG_DERIVEKEY|SSH_BUG_DUMMYCHAN|
    150      0    stevel 					SSH_BUG_FIRSTKEX },
    151      0    stevel 		{ "2.2.0*,"
    152      0    stevel 		  "2.3.0*",		SSH_BUG_HMAC|SSH_BUG_DEBUG|
    153      0    stevel 					SSH_BUG_RSASIGMD5|SSH_BUG_FIRSTKEX },
    154      0    stevel 		{ "2.3.*",		SSH_BUG_DEBUG|SSH_BUG_RSASIGMD5|
    155      0    stevel 					SSH_BUG_FIRSTKEX },
    156      0    stevel 		{ "2.4",		SSH_OLD_SESSIONID },	/* Van Dyke */
    157   5334  jp161948 		{ "2.*",		SSH_BUG_DEBUG|SSH_BUG_FIRSTKEX|
    158   5334  jp161948 					SSH_BUG_RFWD_ADDR},
    159      0    stevel 		{ "3.0.*",		SSH_BUG_DEBUG },
    160      0    stevel 		{ "3.0 SecureCRT*",	SSH_OLD_SESSIONID },
    161      0    stevel 		{ "1.7 SecureFX*",	SSH_OLD_SESSIONID },
    162      0    stevel 		{ "1.2.18*,"
    163      0    stevel 		  "1.2.19*,"
    164      0    stevel 		  "1.2.20*,"
    165      0    stevel 		  "1.2.21*,"
    166      0    stevel 		  "1.2.22*",		SSH_BUG_IGNOREMSG|SSH_BUG_K5USER },
    167      0    stevel 		{ "1.3.2*",		/* F-Secure */
    168      0    stevel 					SSH_BUG_IGNOREMSG|SSH_BUG_K5USER },
    169      0    stevel 		{ "1.2.1*,"
    170      0    stevel 		  "1.2.2*,"
    171      0    stevel 		  "1.2.3*",		SSH_BUG_K5USER },
    172      0    stevel 		{ "*SSH Compatible Server*",			/* Netscreen */
    173      0    stevel 					SSH_BUG_PASSWORDPAD },
    174      0    stevel 		{ "*OSU_0*,"
    175      0    stevel 		  "OSU_1.0*,"
    176      0    stevel 		  "OSU_1.1*,"
    177      0    stevel 		  "OSU_1.2*,"
    178      0    stevel 		  "OSU_1.3*,"
    179      0    stevel 		  "OSU_1.4*,"
    180      0    stevel 		  "OSU_1.5alpha1*,"
    181      0    stevel 		  "OSU_1.5alpha2*,"
    182      0    stevel 		  "OSU_1.5alpha3*",	SSH_BUG_PASSWORDPAD },
    183      0    stevel 		{ "*SSH_Version_Mapper*",
    184      0    stevel 					SSH_BUG_SCANNER },
    185      0    stevel 		{ "Probe-*",
    186      0    stevel 					SSH_BUG_PROBE },
    187      0    stevel 		{ NULL,			0 }
    188      0    stevel 	};
    189      0    stevel 
    190      0    stevel 	/* process table, return first match */
    191      0    stevel 	for (i = 0; check[i].pat; i++) {
    192      0    stevel 		if (match_pattern_list(version, check[i].pat,
    193      0    stevel 		    strlen(check[i].pat), 0) == 1) {
    194      0    stevel 			debug("match: %s pat %s", version, check[i].pat);
    195      0    stevel 			datafellows = check[i].bugs;
    196      0    stevel 			return;
    197      0    stevel 		}
    198      0    stevel 	}
    199      0    stevel 	debug("no match: %s", version);
    200      0    stevel }
    201      0    stevel 
    202      0    stevel #define	SEP	","
    203      0    stevel int
    204      0    stevel proto_spec(const char *spec)
    205      0    stevel {
    206      0    stevel 	char *s, *p, *q;
    207      0    stevel 	int ret = SSH_PROTO_UNKNOWN;
    208      0    stevel 
    209      0    stevel 	if (spec == NULL)
    210      0    stevel 		return ret;
    211      0    stevel 	q = s = xstrdup(spec);
    212      0    stevel 	for ((p = strsep(&q, SEP)); p && *p != '\0'; (p = strsep(&q, SEP))) {
    213      0    stevel 		switch (atoi(p)) {
    214      0    stevel 		case 1:
    215      0    stevel 			if (ret == SSH_PROTO_UNKNOWN)
    216      0    stevel 				ret |= SSH_PROTO_1_PREFERRED;
    217      0    stevel 			ret |= SSH_PROTO_1;
    218      0    stevel 			break;
    219      0    stevel 		case 2:
    220      0    stevel 			ret |= SSH_PROTO_2;
    221      0    stevel 			break;
    222      0    stevel 		default:
    223      0    stevel 			log("ignoring bad proto spec: '%s'.", p);
    224      0    stevel 			break;
    225      0    stevel 		}
    226      0    stevel 	}
    227      0    stevel 	xfree(s);
    228      0    stevel 	return ret;
    229      0    stevel }
    230      0    stevel 
    231      0    stevel char *
    232      0    stevel compat_cipher_proposal(char *cipher_prop)
    233      0    stevel {
    234      0    stevel 	Buffer b;
    235      0    stevel 	char *orig_prop, *fix_ciphers;
    236      0    stevel 	char *cp, *tmp;
    237      0    stevel 
    238      0    stevel 	if (!(datafellows & SSH_BUG_BIGENDIANAES))
    239      0    stevel 		return(cipher_prop);
    240      0    stevel 
    241      0    stevel 	buffer_init(&b);
    242      0    stevel 	tmp = orig_prop = xstrdup(cipher_prop);
    243      0    stevel 	while ((cp = strsep(&tmp, ",")) != NULL) {
    244      0    stevel 		if (strncmp(cp, "aes", 3) != 0) {
    245      0    stevel 			if (buffer_len(&b) > 0)
    246      0    stevel 				buffer_append(&b, ",", 1);
    247      0    stevel 			buffer_append(&b, cp, strlen(cp));
    248      0    stevel 		}
    249      0    stevel 	}
    250      0    stevel 	buffer_append(&b, "\0", 1);
    251      0    stevel 	fix_ciphers = xstrdup(buffer_ptr(&b));
    252      0    stevel 	buffer_free(&b);
    253      0    stevel 	xfree(orig_prop);
    254      0    stevel 	debug2("Original cipher proposal: %s", cipher_prop);
    255      0    stevel 	debug2("Compat cipher proposal: %s", fix_ciphers);
    256      0    stevel 	if (!*fix_ciphers)
    257      0    stevel 		fatal("No available ciphers found.");
    258      0    stevel 
    259      0    stevel 	return(fix_ciphers);
    260      0    stevel }
    261