NetBSD/crypto
spz 51d026c1a4 Coverity issues 996120 and 996121, Use after free
Use the M_CP_STROPT definition exclusive to servconf.c twice and
you have freed your original string.

servconf.h won copying authorized_keys_command and
authorized_keys_command_user in COPY_MATCH_STRING_OPTS in 1.107,
but servconf.c didn't drop its own, so it walks into this trap.
Remove the duplicate copies, and disarm the trap.

Note this is on a code path where authorized_keys_command and
authorized_keys_command_user don't actually get used except
for a debug dump of the config, and dump_cfg_string protects
itself against trying to print NULL pointers, so all
you get is sshd -T -C ... giving wrong results, which is rather
insignificant as far as security issues go.
2013-12-15 10:42:52 +00:00
..
dist/ipsec-tools remove unused variables 2013-10-20 21:17:28 +00:00
external Coverity issues 996120 and 996121, Use after free 2013-12-15 10:42:52 +00:00
Makefile.openssl
TODO