Fix `ssh2.0.11-keyderive-nonbug' on the strength of Ben's analysis.

Not tested it myself.

[originally from svn r2861]

diff --git a/ssh.c b/ssh.c
index ba2e075317269644f9b84d57dffb255bf00c6448..76dc2ec6ebbf283dfd52568b5a7a4d7018adcf61 100644 (file)
--- a/ssh.c
+++ b/ssh.c
@@ -1772,7 +1772,7 @@ static void ssh_detect_bugs(Ssh ssh, char *vstring)
 
     if (ssh->cfg.sshbug_derivekey2 == FORCE_ON ||
        (ssh->cfg.sshbug_derivekey2 == AUTO &&
-        (wc_match("2.0.0*", imp) || wc_match("2.0.1[01]*", imp) ))) {
+        (wc_match("2.0.0*", imp) || wc_match("2.0.10*", imp) ))) {
        /*
         * These versions have the key-derivation bug (failing to
         * include the literal shared secret in the hashes that