Menu

#1388 patch for bug 2923: snmpv3 bulkget errors result in double free core dump

backport-needed
closed
nobody
None
2
2019-06-05
2019-03-05
Sam Tannous
No

This is a patch for https://sourceforge.net/p/net-snmp/bugs/2923/ when almost any v3 bulkget
error will cause a core dump of snmpd.

1 Attachments

Discussion

  • Bart Van Assche

    Bart Van Assche - 2019-04-10

    This patch has been applied on the v5.8 and master branches. Thanks for the patch!

     
  • Bart Van Assche

    Bart Van Assche - 2019-04-10
    • status: open --> closed
     
  • Ming Chen

    Ming Chen - 2019-06-05

    Hi Bart,

    There is a minor bug in this patch - which might be introduced by a typo error.

    • if (old_ref->usr_engine_id_length)
    • SNMP_FREE(old_ref->usr_engine_id);
    • if (old_ref->usr_auth_protocol_length)
    • SNMP_FREE(old_ref->usr_auth_protocol);
    • if (old_ref->usr_auth_protocol_length)
    • SNMP_FREE(old_ref->usr_priv_protocol);

    The bold variable usr_auth_protocol_length should be replaced by usr_priv_protocol_length.

     

    Last edit: Ming Chen 2019-06-05

Log in to post a comment.

Want the latest updates on software, tech news, and AI?
Get latest updates about software, tech news, and AI from SourceForge directly in your inbox once a month.