octoleo/phpseclib
1
0
Fork 0
mirror of https://github.com/phpseclib/phpseclib.git synced 2025-02-04 21:08:28 +00:00
Code Issues Packages Projects Releases Wiki Activity

SSH2: don't count len of packets sent / rcvd during key exchange

Browse Source
This commit is contained in:
terrafrost 2024-11-22 16:31:06 -06:00
parent ccf4b488e8
commit b38e84972d
1 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
phpseclib/Net/SSH2.php
View File

@ -3749,7 +3749,9 @@ class Net_SSH2
$remaining_length = $packet_length + 4 - $this->decrypt_block_size;
if (!$this->keyExchangeInProgress) {
$this->bytesTransferredSinceLastKEX+= $packet_length + $padding_length + 5;
}
// quoting <http://tools.ietf.org/html/rfc4253#section-6.1>,
// "implementations SHOULD check that the packet length is reasonable"
@ -4468,7 +4470,9 @@ class Net_SSH2
$packet.= $hmac;
if (!$this->keyExchangeInProgress) {
$this->bytesTransferredSinceLastKEX+= strlen($packet);
}
$start = strtok(microtime(), ' ') + strtok(''); // http://php.net/microtime#61838
$result = strlen($packet) == @fputs($this->fsock, $packet);