bugzilla-daemon at bugzilla.mindrot.org
2019-Feb-05 14:09 UTC
[Bug 2962] New: client leaks ssh context, host_arg and packet.c leaks kex-structure.
https://bugzilla.mindrot.org/show_bug.cgi?id=2962 Bug ID: 2962 Summary: client leaks ssh context, host_arg and packet.c leaks kex-structure. Product: Portable OpenSSH Version: 7.9p1 Hardware: All OS: All Status: NEW Severity: minor Priority: P5 Component: ssh Assignee: unassigned-bugs at mindrot.org Reporter: markus at blueflash.cc Created attachment 3235 --> https://bugzilla.mindrot.org/attachment.cgi?id=3235&action=edit client_cleanup.diff After completing the session, the client leaks the ssh structure and the host_arg. Also, on cleanup, packet.c leaks the kex-structure (which is held inside the ssh struct). I've also moved host_arg from global to local variable, because it is only passed to one function. Patch is attached. -- You are receiving this mail because: You are watching the assignee of the bug.
bugzilla-daemon at bugzilla.mindrot.org
2019-Feb-05 14:18 UTC
[Bug 2962] client leaks ssh context, host_arg and packet.c leaks kex-structure.
https://bugzilla.mindrot.org/show_bug.cgi?id=2962 Markus <markus at blueflash.cc> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #3235|0 |1 is obsolete| | --- Comment #1 from Markus <markus at blueflash.cc> --- Created attachment 3237 --> https://bugzilla.mindrot.org/attachment.cgi?id=3237&action=edit fixex leaks and a problem with previous patch (sorry for the mess). -- You are receiving this mail because: You are watching the assignee of the bug.
bugzilla-daemon at bugzilla.mindrot.org
2019-Feb-22 03:53 UTC
[Bug 2962] client leaks ssh context, host_arg and packet.c leaks kex-structure.
https://bugzilla.mindrot.org/show_bug.cgi?id=2962 Damien Miller <djm at mindrot.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |djm at mindrot.org Attachment #3237|0 |1 is patch| | Attachment #3237|application/octet-stream |text/plain mime type| | -- You are receiving this mail because: You are watching someone on the CC list of the bug. You are watching the assignee of the bug.