Re: Call for testing: OpenSSH 7.2

[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

 



On 02/12/2016 04:56 AM, Damien Miller wrote:
  * all: add support for RSA signatures using SHA-256/512 hash
    algorithms based on draft-rsa-dsa-sha2-256-03.txt and
    draft-ssh-ext-info-04.txt.
So far I hit one memory leak in HostKey signing code (see attached patch). There might be more that were not hit in our use case.

Regards,

--
Jakub Jelen
Security Technologies
Red Hat

diff --git a/monitor.c b/monitor.c
index 378c94a..742d601 100644
--- a/monitor.c
+++ b/monitor.c
@@ -818,6 +818,7 @@ mm_answer_sign(int sock, Buffer *m)
 		fatal("%s: buffer error: %s", __func__, ssh_err(r));
 
 	free(p);
+	free(sig);
 	free(signature);
 
 	mm_request_send(sock, MONITOR_ANS_SIGN, m);
_______________________________________________
openssh-unix-dev mailing list
openssh-unix-dev@xxxxxxxxxxx
https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev

[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

[Index of Archives]     [Linux ARM Kernel]     [Linux ARM]     [Linux Omap]     [Fedora ARM]     [IETF Annouce]     [Security]     [Bugtraq]     [Linux]     [Linux OMAP]     [Linux MIPS]     [ECOS]     [Asterisk Internet PBX]     [Linux API]

  Powered by Linux