Skip to content
This repository has been archived by the owner on Aug 17, 2022. It is now read-only.

Include random chars in xauth cookie tmpfile #125

Merged
merged 2 commits into from Jun 26, 2018

Conversation

dcarosone
Copy link

Addresses DoS race in #121
doesn't yet address the umask assumption for xauth(1)

lvh and others added 2 commits June 25, 2018 15:34
* Tweak protocol.txt

First one, re: Ed25519->X25519: https://github.com/oxy-secure/oxy/blob/571ef12199f8b0f3eca5559f031b572677b8ab86/src/core/kex.rs#L57 (unless I've totally misunderstood that flow)

Second one: bit of a nit, AFAICT there's no ECDSA.

Thanks for publishing this; this was a neat read.
Addresses DoS race in #121
doesn't yet address the umask assumption for xauth(1)
@jennamagius jennamagius changed the base branch from master to dev June 26, 2018 05:23
@jennamagius
Copy link
Contributor

Looks great, thanks!

@jennamagius jennamagius merged commit 54c1d9c into oxy-secure:dev Jun 26, 2018
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
3 participants