Add missing

hp = strtok(NULL, ",");
to end of while loop which parses "host.allow" from login.conf(5).
Otherwise, sshd(8) would just infinite loop unless there was a
(positive or negative) match in the first word of the "host.allow" list...

crypto/dist/ssh/auth.c

@@ -1,4 +1,4 @@
-/*	$NetBSD: auth.c,v 1.17 2003/03/24 18:25:21 lukem Exp $	*/
+/*	$NetBSD: auth.c,v 1.18 2003/03/24 18:31:39 lukem Exp $	*/
 /*
  * Copyright (c) 2000 Markus Friedl.  All rights reserved.
  *
@@ -141,6 +141,7 @@ allowed_user(struct passwd * pw)
 			}
 			if (match_name > 0 || match_ip > 0)
 				break;
+			hp = strtok(NULL, ",");
 		}
 		free(cap_hlist);
 		if (hp == NULL) {