New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

use-of-uninitialized-value in _libssh2_packet_add #477

Closed

ltx2018 opened this issue May 28, 2020 · 2 comments

Contributor

ltx2018 commented May 28, 2020 •

edited

i found use-of-uninitialized-value in _libssh2_packet_add by fuzzing libssh2-master:

it may caused by malloc(0) in _libssh2_transport_read:

total_num is zero, p->payload is a wild ptr(NOT NULL)

OS: ubuntu 16.04

Contributor Author

ltx2018 commented May 28, 2020

#476 may be a way to fix

Member

willco007 commented May 28, 2020

Committed #476, thanks for the report.

willco007 closed this as completed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment