https://bugzilla.mindrot.org/show_bug.cgi?id=2926

--- Comment #5 from Enzo <[email protected]> ---
At the section "Lines 1282-1294 parse_args(const char **cpp, int
*ignore_errors, int *aflag," I see a possible bug.
You can intercept the "-" and the "@" at any place in the command
string.
Which can lead to unwanted results.

IMHO the correct code could begin with something like:

for (char* cpend=cp+2;*cp != '\0' && cp < cpend; cp++) {

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.
_______________________________________________
openssh-bugs mailing list
[email protected]
https://lists.mindrot.org/mailman/listinfo/openssh-bugs

Reply via email to