On Sat, 28 Nov 2020, Jubin Zhong wrote: > There is a wrong usage of strchr() in openssh. strchr() shall return a > null pointer if the char was not found. Check whether return value is > NULL instead of dereferencing it. Applied - thanks. In this case, cp==NULL should not be possible as the auth_opts->env entries are guaranteed to contain '=' by auth-options.c -d _______________________________________________ openssh-unix-dev mailing list openssh-unix-dev@xxxxxxxxxxx https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev