NULL ptr dereferences found with Calysto static checker

Gert Doering gert at greenie.muc.de
Thu Jun 21 19:58:07 EST 2007


Hi,

On Wed, Jun 20, 2007 at 11:47:59PM -0700, Domagoj Babic wrote:
> Please see
> 
> localtime/gmtime in
> http://www.gnu.org/software/libc/manual/html_mono/libc.html.gz

Indeed, on GNU systems, this can happen:

"The return value is the null pointer if time cannot be represented as a 
broken-down time; typically this is because the year cannot fit into an int."

- so, OpenSSH will break in the year 4294967297.  Damn.

gert
-- 
USENET is *not* the non-clickable part of WWW!
                                                           //www.muc.de/~gert/
Gert Doering - Munich, Germany                             gert at greenie.muc.de
fax: +49-89-35655025                        gert at net.informatik.tu-muenchen.de


More information about the openssh-unix-dev mailing list