[Bug 996] Fatal error in xfree() when scp invokes ssh with a LocalForward config

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Thu Mar 10 16:53:18 EST 2005


http://bugzilla.mindrot.org/show_bug.cgi?id=996


dtucker at zip.com.au changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
 Attachment #848 is|0                           |1
           obsolete|                            |




------- Additional Comments From dtucker at zip.com.au  2005-03-10 16:53 -------
Created an attachment (id=849)
 --> (http://bugzilla.mindrot.org/attachment.cgi?id=849&action=view)
check forward listen_host for null

I've been through the code and there appears to be one other instance of this
bug (immediately after the one you found) which is also fixed in this patch.

Basically, listen_host is new (it's to support the options to bind() port
forwards to specified addresses, and it's optional.  When it's not provided for
a particular forward, it's NULL.  When it's NULL and ClearAllForwardings is
set, ssh dies screaming.

As a workaround, prepending ":" to the forward spec should prevent it from
happening even without the patch.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.




More information about the openssh-bugs mailing list