This is probably CVE-worthy in its own right.
-
-
- 1 more reply
New conversation -
-
-
Hmm? I don't see that here.
-
$ ssh -V -- OpenSSH_7.5, LibreSSL 2.6.0 $ ssh -- -V ssh: Could not resolve hostname -v: no address associated with name
-
Maybe it's OpenBSD vs portable difference? Misuse of getopt?
-
It's a misuse of getopt. ssh.c's main() does "goto again" after peeling off hostname, accepts more options after the hostname.
-
And because getopt was reset (optreset) and re-run with new starting argc/argv, it doesn't see the "--" and accepts more options... Uhg.
-
I think a one-line all-minus patch fixes it: - goto again;
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.