Re: Can an SSH_MSG_EXT_INFO have zero entries?

[Peter Gutmann <pgut001%cs.auckland.ac.nz@localhost>]

I wrote:

>It's technically legal according to the spec, but then so is a message with
>four billion extensions (assuming the packet length requirement is met).
>However, both of those values indicate that there's something severely wrong
>with the implementation sending it, sort of like running into someone wearing
>their underpants on their head the instinctive response is to cross the
>street to avoid them.

Just got a debug trace for the server that does this:

Read SSH ID string:
0000: 53 53 48 2D 32 2E 30 2D 41 7A 75 72 65 53 53 48 SSH-2.0-AzureSSH
0016: 5F 31 2E 30 2E 30                               _1.0.0

So Microsoft have done their own SSH implementation, and it's the one sending
this nonsensical message.

Of course it would be.

Peter.