| Summary: | [mux.c] fix memory leaks when new session message is malformed | ||||||
|---|---|---|---|---|---|---|---|
| Product: | Portable OpenSSH | Reporter: | Bert Wesarg <Bert.Wesarg> | ||||
| Component: | ssh | Assignee: | Assigned to nobody <unassigned-bugs> | ||||
| Status: | CLOSED FIXED | ||||||
| Severity: | critical | CC: | djm | ||||
| Priority: | P2 | ||||||
| Version: | 6.0p1 | ||||||
| Hardware: | All | ||||||
| OS: | All | ||||||
| Bug Depends on: | |||||||
| Bug Blocks: | 1986 | ||||||
| Attachments: |
|
||||||
patch applied - thanks. Set all RESOLVED bugs to CLOSED with release of OpenSSH 7.1 |
Created attachment 2148 [details] Patch fixing memory leak The malf: exception block is also used when extracting the environments for the new session, therefor we need also to free those if it fails. Also free the context object in two cleanup blocks. I set the severity to critical because this could be used to DOS the muxserver by leaking memory in them.