doc/share/security/patches/SA-13:14/openssh.patch
Dag-Erling Smørgrav f57acf6c24 Pre-zero the MAC context.
Security:	CVE-2013-4548
Security:	FreeBSD-SA-13:14.openssh
Approved by:	so
2013-11-19 10:20:35 +00:00

13 lines
470 B
Diff

Index: crypto/openssh/monitor_wrap.c
===================================================================
--- crypto/openssh/monitor_wrap.c (revision 257864)
+++ crypto/openssh/monitor_wrap.c (working copy)
@@ -480,7 +480,7 @@ mm_newkeys_from_blob(u_char *blob, int blen)
buffer_init(&b);
buffer_append(&b, blob, blen);
- newkey = xmalloc(sizeof(*newkey));
+ newkey = xcalloc(1, sizeof(*newkey));
enc = &newkey->enc;
mac = &newkey->mac;
comp = &newkey->comp;