lib/libssh
1
0
Fork 0
mirror of https://git.libssh.org/projects/libssh.git synced 2025-05-17 19:21:11 +03:00
Code

Fix free() on uninitialized data on some cases.

Browse Source
This commit is contained in:
Aris Adamantiadis 2010-12-19 12:33:31 +01:00
parent 14d6b8856f
commit 47d11734e1
1 changed files with 1 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
src/kex.c
View File

@ -256,6 +256,7 @@ SSH_PACKET_CALLBACK(ssh_packet_kexinit){
enter_function(); enter_function();
(void)type; (void)type;
(void)user; (void)user;
memset(strings, 0, sizeof(strings));
if(session->session_state != SSH_SESSION_STATE_INITIAL_KEX){ if(session->session_state != SSH_SESSION_STATE_INITIAL_KEX){
ssh_set_error(session,SSH_FATAL,"SSH_KEXINIT received in wrong state"); ssh_set_error(session,SSH_FATAL,"SSH_KEXINIT received in wrong state");
goto error; goto error;
@ -282,8 +283,6 @@ SSH_PACKET_CALLBACK(ssh_packet_kexinit){
} }
} }
memset(strings, 0, sizeof(char *) * 10);
for (i = 0; i < 10; i++) { for (i = 0; i < 10; i++) {
str = buffer_get_ssh_string(packet); str = buffer_get_ssh_string(packet);
if (str == NULL) { if (str == NULL) {