if (*imp) imp++;
static void ssh_detect_bugs(char *vstring) {    char *imp;                         /* pointer to implementation part */    imp = vstring;    imp += strcspn(imp, "-");    imp += strcspn(imp, "-");    ssh_remote_bugs = 0;    if (!strcmp(imp, "1.2.18") || !strcmp(imp, "1.2.19") ||        !strcmp(imp, "1.2.20") || !strcmp(imp, "1.2.21") ||        !strcmp(imp, "1.2.22")) {        /*         * These versions don't support SSH1_MSG_IGNORE, so we have         * to use a different defence against password length         * sniffing.         */        ssh_remote_bugs |= BUG_CHOKES_ON_SSH1_IGNORE;        logevent("We believe remote version has SSH1 ignore bug");    }    if (!strncmp(imp, "2.1.0", 5) || !strncmp(imp, "2.0.", 4) ||        !strncmp(imp, "2.2.0", 5) || !strncmp(imp, "2.3.0", 5) ||        !strncmp(imp, "2.1 ", 4)) {        /*         * These versions have the HMAC bug.         */        ssh_remote_bugs |= BUG_SSH2_HMAC;        logevent("We believe remote version has SSH2 HMAC bug");    }}