aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAndreas Schneider <asn@cryptomilk.org>2014-12-05 10:59:41 +0100
committerAndreas Schneider <asn@cryptomilk.org>2014-12-05 10:59:41 +0100
commit32a106c70d61123a0558a80b8f45c62c4dd49027 (patch)
tree200fd49d887c87a0df5f8c5bd7c09c35b8fd0e3b
parent5d75090d9fe23c6ef27560de47fc141fc769c6cd (diff)
downloadlibssh-32a106c70d61123a0558a80b8f45c62c4dd49027.tar.gz
libssh-32a106c70d61123a0558a80b8f45c62c4dd49027.tar.xz
libssh-32a106c70d61123a0558a80b8f45c62c4dd49027.zip
messages: Fix a possible double free.
Thanks to Ramana Gampa. Signed-off-by: Andreas Schneider <asn@cryptomilk.org>
-rw-r--r--src/messages.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/src/messages.c b/src/messages.c
index 374aec27..9797ce1e 100644
--- a/src/messages.c
+++ b/src/messages.c
@@ -1371,6 +1371,7 @@ int ssh_message_handle_channel_request(ssh_session session, ssh_channel channel,
msg->channel_request.pxheight = ntohl(msg->channel_request.pxheight);
msg->channel_request.modes = buffer_get_ssh_string(packet);
if (msg->channel_request.modes == NULL) {
+ msg->channel_request.TERM = NULL;
SAFE_FREE(term_c);
goto error;
}