Menu

#26 Attempt to use pam_ssh_agent_auth without a keyfile present causes a SEGV

open
nobody
None
5
2017-09-22
2017-09-22
Jakub Jelen
No

As reported in the red hat bugzilla, the latest release is causing sagfault because of trying to free uninitialized memory of buffer:
https://bugzilla.redhat.com/show_bug.cgi?id=1494268

The crash comes from the sshbuf_check_sanity() during buffer_free() on uninitialized buffer. Solution is to properly initialize buffer early or return on the first errors instead of going to the cleanup phase.

Discussion


Log in to post a comment.