session_identification()

Ed Sutter ed.sutter at alcatel-lucent.com
Sat Apr 13 04:05:18 WST 2013


Hi,
Not sure, but I think I stumbled on what may be a problem with the
session_identification() function...

Shouldn't the strncmp() at the bottom of the function only be executed
if the done flag is true?  Seems to me that this could cause a crash because
ses.remoteident may be NULL.

Ed


More information about the Dropbear mailing list