[PATCH] Fix buffer overrun

Salvador Fandino sfandino at gmail.com
Thu Jun 25 20:28:46 AEST 2015


When a forwarding specification ending in a slash ('\\') is used,
the function "parse_fwd_field" jumps over the '\0' char marking
the end of the string and keeps processing.

This patch checks for that condition.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Fix-buffer-overrun.patch
Type: application/text
Size: 850 bytes
Desc: not available
URL: <http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20150625/b3ac0f28/attachment.bin>


More information about the openssh-unix-dev mailing list