]> git.99rst.org Git - openwrt-packages.git/commit
libssh: fix big-endian -R forwarding and crash without entropy source
authorDaniel Golle <redacted>
Fri, 28 Aug 2026 08:19:13 +0000 (09:19 +0100)
committerAlexandru Ardelean <redacted>
Fri, 28 Aug 2026 09:14:51 +0000 (12:14 +0300)
commitbdcd738a1b9d99f311f6af376a820ce139393523
tree00179384e48a93173007036c625eaa91049ac359
parent29a148ba4b67dc0c433f056708cfe4ee3aac2c42
libssh: fix big-endian -R forwarding and crash without entropy source

On big-endian hosts the server parsed every tcpip-forward bind port as
zero and bound an ephemeral port, so -R remote forwarding never carried
a connection. With no usable entropy source the library crashed inside
mbedtls instead of failing cleanly.

Patches 2-4 were sent upstream to the libssh mailing list:
https://archive.libssh.org/libssh/2026-08/0000000.html
https://archive.libssh.org/libssh/2026-08/0000001.html
Patch 1 backports the seed-failure error path they depend on from
upstream master commit ac4b723c.

Signed-off-by: Daniel Golle <redacted>
libs/libssh/Makefile
libs/libssh/patches/0001-mbedtls-Fail-ssh_crypto_init-when-the-CTR-DRBG-cannot-be-seeded.patch [new file with mode: 0644]
libs/libssh/patches/0002-messages-Parse-the-forwarding-bind-port-as-the-uint32-it-is-on-the-wire.patch [new file with mode: 0644]
libs/libssh/patches/0003-mbedtls-Guard-the-CTR-DRBG-against-use-before-it-is-seeded.patch [new file with mode: 0644]
libs/libssh/patches/0004-init-Do-not-report-a-failed-initialisation-as-initialised.patch [new file with mode: 0644]
git clone https://git.99rst.org/PROJECT