breeze/openssh-portable
1
0
Fork 0
mirror of https://github.com/openssh/openssh-portable.git synced 2026-01-12 00:04:08 +08:00
Code Issues Packages Projects Releases Wiki Activity

upstream: avoid use-after-free in update_krl_from_file() found with

Browse Source 
clang scan-build, ok dtucker@

OpenBSD-Commit-ID: 8ec86eca573740c94d5bc7e252959174555f4eb8
This commit is contained in:
jsg@openbsd.org
2025-09-25 12:52:21 +00:00
committed by Damien Miller
parent b06a150bc9
commit b1c4bf5c2f
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
ssh-keygen.c
View File

@@ -1,4 +1,4 @@
/* $OpenBSD: ssh-keygen.c,v 1.483 2025/09/25 07:04:38 djm Exp $ */
/* $OpenBSD: ssh-keygen.c,v 1.484 2025/09/25 12:52:21 jsg Exp $ */
/*
* Author: Tatu Ylonen <ylo@cs.hut.fi>
* Copyright (c) 1994 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
@@ -2321,6 +2321,8 @@ update_krl_from_file(struct passwd *pw, const char *file, int wild_ca,
blob, blen)) != 0)
fatal_fr(r, "revoke key failed");
free(blob);
blob = NULL;
blen = 0;
} else {
if (strncasecmp(cp, "key:", 4) == 0) {
cp += 4;