lede-packages-rs

git clone git://archive.git.mtrnord.blog/MTRNord/lede-packages-rs.git
Log | Files | Refs | README | LICENSE

008-racoon-fix_dereference_crash.patch (484B)

      1 Fix null dereference in racoon/gssapi.c (CVE-2015-4047)
      2 
      3 --- a/src/racoon/gssapi.c
      4 +++ b/src/racoon/gssapi.c
      5 @@ -192,6 +192,11 @@ gssapi_init(struct ph1handle *iph1)
      6  	gss_name_t princ, canon_princ;
      7  	OM_uint32 maj_stat, min_stat;
      8  
      9 +	if (iph1->rmconf == NULL) {
     10 +		plog(LLV_ERROR, LOCATION, NULL, "no remote config\n");
     11 +		return -1;
     12 +	}
     13 +
     14  	gps = racoon_calloc(1, sizeof (struct gssapi_ph1_state));
     15  	if (gps == NULL) {
     16  		plog(LLV_ERROR, LOCATION, NULL, "racoon_calloc failed\n");