James Tucker a819ec0753 ssh/tailssh: make acceptEnv pattern matching linear time ...

matchAcceptEnvPattern recursively retried each '*' suffix, which is
exponential in the number of '*'s in an acceptEnv pattern (2.7s observed
on a 400-byte crafted variable name). Replace it with an iterative
matcher that only backtracks to the most recent '*', preserving the
exact OpenSSH-style glob semantics. Cross-check it against a naive
backtracking reference over random inputs, and pin the crafted
backtracking case as a timing regression test.

Updates tailscale/corp#50380

Signed-off-by: James Tucker <james@tailscale.com>

2026-10-24 12:13:05 -07:00

..

testcontainers

ssh/tailssh: speed up SSH integration tests

2026-04-13 14:18:27 -07:00

accept_env_test.go

ssh/tailssh: make acceptEnv pattern matching linear time

2026-10-24 12:13:05 -07:00

accept_env.go

ssh/tailssh: make acceptEnv pattern matching linear time

2026-10-24 12:13:05 -07:00

auditd_linux_test.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

auditd_linux.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

c2n.go

ssh/tailssh: split the OS-specific parts of the server into their own files

2026-09-15 19:32:40 -07:00

hostkeys_test.go

ipn/ipnlocal, feature/ssh: move SSH code out of LocalBackend to feature

2026-03-10 17:27:17 -07:00

hostkeys.go

ssh/tailssh: split the OS-specific parts of the server into their own files

2026-09-15 19:32:40 -07:00

incubator_linux.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

incubator_plan9.go

ssh/tailssh: split the OS-specific parts of the server into their own files

2026-09-15 19:32:40 -07:00

incubator_test.go

ssh/tailssh: keep acceptEnv values and names out of the incubator cmdline (#20552)

2026-07-30 09:57:55 -06:00

incubator.go

ssh/tailssh: dup the pty master with F_DUPFD_CLOEXEC (#21342)

2026-10-16 17:45:34 -07:00

listen.go

feature: add TS_DISABLE_FEATURE to disable features at runtime

2026-09-15 08:37:47 -07:00

localstate_test.go

format using go fmt version 1.27.2 (#21838)

2026-10-21 23:17:21 -07:00

privs_test.go

tstest: add RequireRoot helper

2026-04-10 10:48:50 -07:00

process_unix.go

ssh/tailssh: split the OS-specific parts of the server into their own files

2026-09-15 19:32:40 -07:00

session.go

tsnet: add opt-in SSH support (Server.ListenSSH)

2026-05-30 14:17:50 -07:00

sftp.go

ssh/tailssh: split the OS-specific parts of the server into their own files

2026-09-15 19:32:40 -07:00

tailssh_exitcodes_test.go

ssh/tailssh: test exit-status frame ordering and stderr drain

2026-07-30 10:18:00 +02:00

tailssh_frameorder_test.go

ssh/tailssh: test exit-status frame ordering and stderr drain

2026-07-30 10:18:00 +02:00

tailssh_integration_exitcodes_test.go

ssh/tailssh: add exit-status test harness

2026-07-30 10:18:00 +02:00

tailssh_integration_test.go

ssh/tailssh: dup the pty master with F_DUPFD_CLOEXEC (#21342)

2026-10-16 17:45:34 -07:00

tailssh_test.go

ssh/tailssh: record the raw client command in session recordings

2026-10-24 11:32:32 -07:00

tailssh.go

ssh/tailssh: record the raw client command in session recordings

2026-10-24 11:32:32 -07:00

user_unix.go

ssh/tailssh: split the OS-specific parts of the server into their own files

2026-09-15 19:32:40 -07:00

user.go

ssh/tailssh: split the OS-specific parts of the server into their own files

2026-09-15 19:32:40 -07:00