File 0010-CVE-2012-4561-Fix-error-handling-of-try_publickey_fr.patch of Package libssh.1120
From 1164c4ade5d39213a90e329042ae76d9a7f98f74 Mon Sep 17 00:00:00 2001
From: Andreas Schneider <asn@cryptomilk.org>
Date: Fri, 5 Oct 2012 14:56:56 +0200
Subject: [PATCH 10/11] CVE-2012-4561: Fix error handling of
try_publickey_from_file().
Signed-off-by: Andreas Schneider <asn@cryptomilk.org>
(cherry picked from commit a7e3f34c1e0e29ddedb47716e9dd7b1188b53305)
---
src/keyfiles.c | 12 ++++++------
1 file changed, 6 insertions(+), 6 deletions(-)
diff --git a/src/keyfiles.c b/src/keyfiles.c
index e160f71..584f60c 100644
--- a/src/keyfiles.c
+++ b/src/keyfiles.c
@@ -1214,7 +1214,7 @@ ssh_string try_publickey_from_file(ssh_session session, struct ssh_keys_struct k
const char *priv;
const char *pub;
char *new;
- ssh_string pubkey=NULL;
+ ssh_string pubkey;
pub = keytab.publickey;
if (pub == NULL) {
@@ -1234,13 +1234,13 @@ ssh_string try_publickey_from_file(ssh_session session, struct ssh_keys_struct k
ssh_log(session, SSH_LOG_PACKET, "Trying to open publickey %s", pub);
if (!ssh_file_readaccess_ok(pub)) {
ssh_log(session, SSH_LOG_PACKET, "Failed to open publickey %s", pub);
- goto error;
+ return NULL;
}
ssh_log(session, SSH_LOG_PACKET, "Trying to open privatekey %s", priv);
if (!ssh_file_readaccess_ok(priv)) {
ssh_log(session, SSH_LOG_PACKET, "Failed to open privatekey %s", priv);
- goto error;
+ return NULL;
}
ssh_log(session, SSH_LOG_PACKET, "Success opening public and private key");
@@ -1255,18 +1255,18 @@ ssh_string try_publickey_from_file(ssh_session session, struct ssh_keys_struct k
"Wasn't able to open public key file %s: %s",
pub,
ssh_get_error(session));
- goto error;
+ return NULL;
}
new = realloc(*privkeyfile, strlen(priv) + 1);
if (new == NULL) {
ssh_string_free(pubkey);
- goto error;
+ return NULL;
}
strcpy(new, priv);
*privkeyfile = new;
-error:
+
return pubkey;
}
--
1.7.10.4