diff options
| author | Marcus Glocker <mglocker@cvs.openbsd.org> | 2020-08-27 19:55:01 +0000 |
|---|---|---|
| committer | Marcus Glocker <mglocker@cvs.openbsd.org> | 2020-08-27 19:55:01 +0000 |
| commit | 6c870c8e7f84c3d15036b11e6558b1ae8b161b04 (patch) | |
| tree | 8cdc0635655e81f4004ff4579ef591d334d64ada /share/man | |
| parent | da996869d46004ebc8312a0f1e6790744f65a08e (diff) | |
Fix a potential panic during free(9) which can be caused by an USB
device which returns a spurious value for wTotalLength on a configuration
descriptor request. Therefore don't relay on wTotalLength for free(9)
but on the length variable which was used for the malloc(9) before.
The issue was reported by
Mikolaj Kucharski <mikolaj (at) kucharski (dot) name> on bugs@.
Discussed and ok deraadt@
Diffstat (limited to 'share/man')
0 files changed, 0 insertions, 0 deletions