summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMoritz Jodeit <moritz@cvs.openbsd.org>2006-08-07 15:41:46 +0000
committerMoritz Jodeit <moritz@cvs.openbsd.org>2006-08-07 15:41:46 +0000
commit451240313d3c9b9cf62b4504cccbd786d98e99fc (patch)
treef635e1236311281c6cd475a4519461ca8e443ae7
parentf27f71cadadfbb27bb222a48e1d0604b464cb311 (diff)
Fix use-after-free bug, which was triggered with too
long header lines. Diff from Claus Assmann. ok thib@ millert@
-rw-r--r--gnu/usr.sbin/sendmail/sendmail/main.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/gnu/usr.sbin/sendmail/sendmail/main.c b/gnu/usr.sbin/sendmail/sendmail/main.c
index 40b55c3b53a..4f707124eda 100644
--- a/gnu/usr.sbin/sendmail/sendmail/main.c
+++ b/gnu/usr.sbin/sendmail/sendmail/main.c
@@ -2903,6 +2903,7 @@ finis(drop, cleanup, exitstat)
dropenvelope(CurEnv, true, false);
sm_rpool_free(CurEnv->e_rpool);
CurEnv->e_rpool = NULL;
+ CurEnv->e_to = NULL;
}
else
poststats(StatFile);