Deny SSH2-proxy connections with no username

mezantrop · Mar 11, 2024 · c403a1c · c403a1c
1 parent 14c3884
commit c403a1c
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,6 +1,7 @@
 # CHANGELOG
 
-* **2024.03.06    Current**
+* **2024.03.11    Current**
+  * `ssh2.c`: Deny SSH2-proxy connections with no username
   * `ssh2.c`: Do not try manual authentication is agent-authentication was successful
   * `ssh2.c`: Variable `proxy_ssh_force_auth` in `ts-warp.ini` to force or negotiate SSH2 authenticaton methods
   * `ts-warp.c`: CLI options to disable `TS-Warp` port listeners: `-T 0:0`, `-S 0:0` and `-H 0:0`

diff --git a/ssh2.c b/ssh2.c
@@ -73,6 +73,11 @@ LIBSSH2_CHANNEL *ssh2_client_request(int socket, LIBSSH2_SESSION *session, struc
     int rc = 0;
 
 
+    if (!user) {
+        printl(LOG_WARN, "No username specified: unable to login into SSH2-proxy!");
+        return NULL;
+    }
+
     if (libssh2_session_handshake(session, socket)) {
         printl(LOG_WARN, "Unable to perform SSH2 handshake");
         return NULL;