www.libssh2.org | Daily snapshots | Mailing list archive | Docs | Examples | github

Archive Index This month's Index

Subject: Re: libssh2 master a8cfc708 channel: fix possible NULL dereference

Re: libssh2 master a8cfc708 channel: fix possible NULL dereference

From: Peter Stuge <peter_at_stuge.se>
Date: Mon, 8 Oct 2012 15:59:04 +0200

Daniel Stenberg wrote:
>> Also, I don't think that libssh2 needs to validate programmer input. If
>> someone passes a NULL pointer to a function that is really an error, and
>> they will then have a problem sooner or later anyway.
>
> Is it possibly so that we use that function internally somewhere with a
> (possibly) NULL argument?

If yes, then that's what need to be fixed. I suspect that Coverity
just notices that it is unchecked user input though. The function is
called only in example/ssh2_echo.c and example/ssh2_exec.c.

//Peter
_______________________________________________
libssh2-devel http://cool.haxx.se/cgi-bin/mailman/listinfo/libssh2-devel
Received on 2012-10-08

the libssh2 team