CVSROOT: /cvs Module name: src Changes by: [email protected] 2026/07/06 01:49:58
Modified files:
usr.bin/ssh : ssh.c sshconnect.c sshconnect.h sshconnect2.c
Log message:
fix ownership and lifetime of several bits of client state that
need to persist for the life of the connection, especially the
cached hostkey that was being incorrectly freed early on some
paths, possibly allowing its use after free.
Reported by Zhenpeng (Leo) Lin from depthfirst.com
