[Bug 2684] New: calling realloc with a size <= 0
    bugzilla-daemon at bugzilla.mindrot.org 
    bugzilla-daemon at bugzilla.mindrot.org
       
    Sun Feb 26 07:50:49 AEDT 2017
    
    
  
https://bugzilla.mindrot.org/show_bug.cgi?id=2684
            Bug ID: 2684
           Summary: calling realloc with a size <= 0
           Product: Portable OpenSSH
           Version: -current
          Hardware: amd64
                OS: FreeBSD
            Status: NEW
          Severity: normal
          Priority: P5
         Component: Miscellaneous
          Assignee: unassigned-bugs at mindrot.org
          Reporter: trix at juniper.net
Created attachment 2949
  --> https://bugzilla.mindrot.org/attachment.cgi?id=2949&action=edit
The fix for master branch at commit id
d5499190559ebe374bcdfa8805408646ceffad64
Problem flagged by clang's static analyzer as :
Undefined allocation of 0 bytes (CERT MEM04-C; CWE-131) 
The fix is the check the inputs better.
See the attachment for the location/fix
-- 
You are receiving this mail because:
You are watching the assignee of the bug.
    
    
More information about the openssh-bugs
mailing list