[Bug 3539] sshbuf memory leak in recv_rexec_state()

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Tue Feb 14 01:21:17 AEDT 2023


https://bugzilla.mindrot.org/show_bug.cgi?id=3539

--- Comment #2 from Michael Rash <mbr at cipherdyne.org> ---
(In reply to Michael Rash from comment #1)
> Created attachment 3672 [details]
> fix sshbuf memory leak in recv_rexec_state()
> 
> Here is a patch with tabs instead of spaces to align with coding
> style.

In recv_rexec_state() the sshbuf 'inc' is not free'd before returning.
The attached trivial patch fixes this, and matches the behavior of
send_rexec_state() which does free a similarly allocated buffer of the
same name.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list