From: Florian N. <flo...@st...> - 2008-08-26 14:37:33
|
Hi, sctp_getladdrs kann result in a crash if the return address is reused after. For security reasons I propose to set "addrs=NULL". Otherwise a misbehavior can be achieved with a second free() on the returned address. int sctp_freeladdrs(struct sockaddr *addrs) { free(addrs); return 0; } /* sctp_freeladdrs() */ proposal: int sctp_freeladdrs(struct sockaddr *addrs) { free(addrs); addrs=NULL; return 0; } /* sctp_freeladdrs() */ |