hi there,


i don't see a security issue in this, just want to ask if this is ok (or 
maybe unwanted?):

in src/usr.sbin/arp/arp.c in function search() (starts line ~429) i see 
this (line ~447):

        if ((buf = malloc(needed)) == NULL)

got from:
http://www.FreeBSD.org/cgi/cvsweb.cgi/src/usr.sbin/arp/arp.c?rev=1.29&conte
nt-type=text/x-cvsweb-markup
which should be latest version(?)

this allocated memory isn't free'd later in this function. so if arp uses 
this function over and over again, memory fills up (not much, but it does).

i just came to this, because i used this search() function while playing 
around with ip -> mac translation and my test programm suddenly had ~60MB 
memory usage :)


alex


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-net" in the body of the message

Reply via email to