[Pkg-gnupg-maint] Bug#773523: [PATCH] * dirmngr/ldapserver.c (ldapserver_parse_one) return NULL on 'fail'.

Werner Koch wk at gnupg.org
Mon Dec 22 11:19:39 UTC 2014


On Sat, 20 Dec 2014 18:35, git at internot.info said:

> If something inside the ldapserver_parse_one function failed, 'server' would be freed, then returned, leading to a use-after-free.
>
> This code is likely copied from sm/gpgsm.c, which was also susceptible to this bug.

Ooops.  Both fixed will push that soon. Thanks.


Shalom-Salam,

   Werner

-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.



More information about the Pkg-gnupg-maint mailing list