Re: [Openvpn-devel] [PATCH] Fix SIGSEGV (NULL deref) receiving push "echo"

2021-06-03 Thread Selva Nair
On Thu, Jun 3, 2021 at 8:32 AM Matthias Andree wrote: > > A server pushing "echo" without arguments can crash the client. > In such a situation, the code in question receives p[1] == NULL > (which was CLEAR(p)'ed above), hands it strncmp, which then > dereferences the null pointer. > > Original re

[Openvpn-devel] [PATCH] Fix SIGSEGV (NULL deref) receiving push "echo"

2021-06-03 Thread Matthias Andree
A server pushing "echo" without arguments can crash the client. In such a situation, the code in question receives p[1] == NULL (which was CLEAR(p)'ed above), hands it strncmp, which then dereferences the null pointer. Original report and analysis here: https://bugs.freebsd.org/bugzilla/show_bug.c