summaryrefslogtreecommitdiff
path: root/sys/netinet6/raw_ipv6.c
diff options
context:
space:
mode:
authorTheo Buehler <tb@cvs.openbsd.org>2024-12-11 11:22:07 +0000
committerTheo Buehler <tb@cvs.openbsd.org>2024-12-11 11:22:07 +0000
commitf42c107a4288efa8d89d089c9d3420aee5799781 (patch)
tree948fb8f02bb363b79e9189ae75d2c51a74b74129 /sys/netinet6/raw_ipv6.c
parent660564313214385da08d63578cd312b5070933a1 (diff)
Avoid an oob access in asn1_item_free()HEADmastercvs/HEAD
As explained in a comment, this needs to loop backwards and the last tt-- ends up pointing at &it->templates[-1], which isn't ok. Use a simple way of looping, which is also ugly and involves some type confusion as pointed out by claudio. However, type confusion is common in libcrypto's asn1 code and won't be fixed anytime soon anyway. ok jsing
Diffstat (limited to 'sys/netinet6/raw_ipv6.c')
0 files changed, 0 insertions, 0 deletions