https://bugzilla.mindrot.org/show_bug.cgi?id=2753

            Bug ID: 2753
           Summary: Access violation of a array in sftp
           Product: Portable OpenSSH
           Version: 7.5p1
          Hardware: amd64
                OS: All
            Status: NEW
          Severity: normal
          Priority: P5
         Component: sftp
          Assignee: unassigned-b...@mindrot.org
          Reporter: yaw...@microsoft.com

We found this issue when enable application verifier on windows. but we
believe this repros on other OS too.
when the command is: sftp myaccount@127.0.0.1. optind+1 is 2, which is
not outside the valid index of argv.

2521                    file2 = argv[optind+1];


Suggested fixes:
                if(argc > optind + 1)
2521                    file2 = argv[optind+1];

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
_______________________________________________
openssh-bugs mailing list
openssh-bugs@mindrot.org
https://lists.mindrot.org/mailman/listinfo/openssh-bugs

Reply via email to