On: OpenSSH 9.0

[rssoconnor]

In C, multiplying two unsigned shorts together can lead to undefined behaviour.

[josephcsible → rssoconnor]

In case it's not obvious how this can happen, it's because the promotion rules can turn them into signed ints, and if they're big enough the product can overflow that. For more details, see https://cryptoservices.github.io/fde/2018/11/30/undefined-be...