diff options
| author |   jsg <jsg@openbsd.org> | 2015-02-09 09:09:30 +0000 |
|---|---|---|
| committer | jsg <jsg@openbsd.org> | 2015-02-09 09:09:30 +0000 |
| commit | e373cecb3518add12e26f8a1cbe77763f5cdfea2 (patch) | |
| tree | 8b83a9e7053ff522d26dc128d9ebd8cecbfd3a65 /usr.sbin/syslogd/syslogd.c | |
| parent | Do not even try to call uvm_grow() from sendsig. It will be invoked (diff) | |
| download | wireguard-openbsd-e373cecb3518add12e26f8a1cbe77763f5cdfea2.tar.xz wireguard-openbsd-e373cecb3518add12e26f8a1cbe77763f5cdfea2.zip | |
If we hit multiple errors while unwinding we'll end up running code that
assumes a pointer is valid when it has been free'd.
This is convoluted as ksh has it's own allocator and uses long jumps.
Set the pointer to NULL after the quitenv() call in unwind() in case we
later hit a long jump in unwind().
Found with afl a while back.
ok tedu@ deraadt@
Diffstat (limited to 'usr.sbin/syslogd/syslogd.c')
0 files changed, 0 insertions, 0 deletions