OpenSSH - Connection problem when LoginGraceTime exceeds time

[Darren Tucker]

Kumaresh wrote:
> For my understanding, may I please know what are the problems with the first
> patch?

This is embarassing, but anyway: in the case where the client connects 
but does not exchange identification (eg if you connect to it with 
telnet and send no data) and the SIGALRM timer expires, the signal 
handler will attempt to dereference pmonitor which will not have been 
initialized at that point.  It will most likely segfault.

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
     Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.