bugzilla-daemon at mindrot.org
2023-Oct-10 16:41 UTC
[Bug 3626] New: potentially uninitialized local pointer in sshkey_ecdsa_key_to_nid() in sshkey.c
https://bugzilla.mindrot.org/show_bug.cgi?id=3626
Bug ID: 3626
Summary: potentially uninitialized local pointer in
sshkey_ecdsa_key_to_nid() in sshkey.c
Product: Portable OpenSSH
Version: 9.5p1
Hardware: All
OS: All
Status: NEW
Severity: trivial
Priority: P5
Component: ssh
Assignee: unassigned-bugs at mindrot.org
Reporter: tessgauthier at microsoft.com
Overview:
eg is uninitialized.
int
sshkey_ecdsa_key_to_nid(EC_KEY *k)
{
EC_GROUP *eg;
...
}
Expected Result:
EC_GROUP *eg = NULL;
Additional Information:
Corresponding compiler warning -
https://learn.microsoft.com/en-us/cpp/error-messages/compiler-warnings/compiler-warning-level-4-c4703?view=msvc-170&f1url=%3FappId%3DDev16IDEF1%26l%3DEN-US%26k%3Dk(C4703)%26rd%3Dtrue
--
You are receiving this mail because:
You are watching the assignee of the bug.
bugzilla-daemon at mindrot.org
2023-Oct-10 22:10 UTC
[Bug 3626] potentially uninitialized local pointer in sshkey_ecdsa_key_to_nid() in sshkey.c
https://bugzilla.mindrot.org/show_bug.cgi?id=3626
Damien Miller <djm at mindrot.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Resolution|--- |INVALID
Status|NEW |RESOLVED
CC| |djm at mindrot.org
--- Comment #1 from Damien Miller <djm at mindrot.org> ---
Another false positive. There is no uninitialised use of `eg`
https://github.com/openssh/openssh-portable/blob/V_9_5_P1/sshkey.c#L1348
--
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.