Re: smtpd: mail.lmtp uninitialzed stack access

2020-03-16 Thread Tobias Heider
On Mon, Mar 16, 2020 at 04:54:19PM -0600, Todd C. Miller wrote: > On Mon, 16 Mar 2020 23:46:35 +0100, Tobias Heider wrote: > > > In main() mail.lmtp checks 'if (argc == 0 && session.rcptto == NULL)' > > after getopt(). If neither an 'r' nor an 'u' option was specified, > > 'session.rcptto' seems

Re: smtpd: mail.lmtp uninitialzed stack access

2020-03-16 Thread Todd C . Miller
On Mon, 16 Mar 2020 23:46:35 +0100, Tobias Heider wrote: > In main() mail.lmtp checks 'if (argc == 0 && session.rcptto == NULL)' > after getopt(). If neither an 'r' nor an 'u' option was specified, > 'session.rcptto' seems to be uninitialized. > The obvious solution would be to NULL initialize

smtpd: mail.lmtp uninitialzed stack access

2020-03-16 Thread Tobias Heider
In main() mail.lmtp checks 'if (argc == 0 && session.rcptto == NULL)' after getopt(). If neither an 'r' nor an 'u' option was specified, 'session.rcptto' seems to be uninitialized. The obvious solution would be to NULL initialize 'struct session'. ok? Index: mail.lmtp.c