[openssh-commits] CVS: fuyu.mindrot.org: openssh

[Damien Miller]

CVSROOT:	/var/cvs
Module name:	openssh
Changes by:	djm at fuyu.mindrot.org	2006/03/26 14:22:48

Modified files:
	.              : ChangeLog auth-pam.c buffer.c channels.c 
	                 deattack.c misc.c scp.c session.c sftp-client.c 
	                 sftp-server.c ssh-agent.c ssh-rand-helper.c 
	                 ssh-rsa.c uidswap.c xmalloc.c xmalloc.h 

Log message:
- djm at cvs.openbsd.org 2006/03/25 01:13:23
[buffer.c channels.c deattack.c misc.c scp.c session.c sftp-client.c]
[sftp-server.c ssh-agent.c ssh-rsa.c xmalloc.c xmalloc.h auth-pam.c]
[uidswap.c]
change OpenSSH's xrealloc() function from being xrealloc(p, new_size)
to xrealloc(p, new_nmemb, new_itemsize).

realloc is particularly prone to integer overflows because it is
almost always allocating "n * size" bytes, so this is a far safer
API; ok deraadt@

cvs -n rdiff -u -r1.4273 -r1.4274 openssh/ChangeLog
cvs -n rdiff -u -r1.131 -r1.132 openssh/auth-pam.c
cvs -n rdiff -u -r1.24 -r1.25 openssh/buffer.c
cvs -n rdiff -u -r1.221 -r1.222 openssh/channels.c
cvs -n rdiff -u -r1.20 -r1.21 openssh/deattack.c
cvs -n rdiff -u -r1.67 -r1.68 openssh/misc.c
cvs -n rdiff -u -r1.151 -r1.152 openssh/scp.c
cvs -n rdiff -u -r1.323 -r1.324 openssh/session.c
cvs -n rdiff -u -r1.66 -r1.67 openssh/sftp-client.c
cvs -n rdiff -u -r1.64 -r1.65 openssh/sftp-server.c
cvs -n rdiff -u -r1.148 -r1.149 openssh/ssh-agent.c
cvs -n rdiff -u -r1.28 -r1.29 openssh/ssh-rand-helper.c
cvs -n rdiff -u -r1.35 -r1.36 openssh/ssh-rsa.c
cvs -n rdiff -u -r1.47 -r1.48 openssh/uidswap.c
cvs -n rdiff -u -r1.14 -r1.15 openssh/xmalloc.c
cvs -n rdiff -u -r1.10 -r1.11 openssh/xmalloc.h