From a7e50fb1b1efb03c4582e9def5064f66f601bcfe Mon Sep 17 00:00:00 2001 From: jp161948 Date: Thu, 21 Sep 2006 03:40:40 -0700 Subject: 6472377 use of system() can cause execution of arbitrary code through malformed filenames (CVE-2006-0225) --- usr/src/cmd/ssh/libssh/common/misc.c | 16 +++++++++++++++- 1 file changed, 15 insertions(+), 1 deletion(-) (limited to 'usr/src/cmd/ssh/libssh/common/misc.c') diff --git a/usr/src/cmd/ssh/libssh/common/misc.c b/usr/src/cmd/ssh/libssh/common/misc.c index 5c4de6102d..33454826f2 100644 --- a/usr/src/cmd/ssh/libssh/common/misc.c +++ b/usr/src/cmd/ssh/libssh/common/misc.c @@ -22,7 +22,7 @@ * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. */ /* - * Copyright 2004 Sun Microsystems, Inc. All rights reserved. + * Copyright 2006 Sun Microsystems, Inc. All rights reserved. * Use is subject to license terms. */ @@ -354,6 +354,20 @@ addargs(arglist *args, char *fmt, ...) args->list[args->num] = NULL; } +void +freeargs(arglist *args) +{ + u_int i; + + if (args->list != NULL) { + for (i = 0; i < args->num; i++) + xfree(args->list[i]); + xfree(args->list); + args->nalloc = args->num = 0; + args->list = NULL; + } +} + mysig_t mysignal(int sig, mysig_t act) { -- cgit v1.2.3