https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=290956

            Bug ID: 290956
           Summary: sftp-server needs to check if localtime(3) has failed
                    and must not pass a NULL pointer to strftime(3)
           Product: Base System
           Version: 16.0-CURRENT
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: bin
          Assignee: [email protected]
          Reporter: [email protected]

sftp-server needs to check whether localtime() has failed and must not pass a
NULL pointer to strftime() - this would lead to a segfault crash.

cd freebsd-src/crypto/openssh
git grep -B 1 -n localtime sftp-server.c

sftp-server.c-1015-             strftime(buf, sizeof(buf), "%Y%m%d-%H:%M:%S",
sftp-server.c:1016:                 localtime(&t));
--
sftp-server.c-1072-                     strftime(buf, sizeof(buf),
"%Y%m%d-%H:%M:%S",
sftp-server.c:1073:                         localtime(&t));
--
sftp-server.c-1495-             strftime(buf, sizeof(buf), "%Y%m%d-%H:%M:%S",
sftp-server.c:1496:                 localtime(&t));

-- 
You are receiving this mail because:
You are the assignee for the bug.

Reply via email to