session_identification()

Ed Sutter ed.sutter at alcatel-lucent.com
Sat Apr 13 04:27:53 WST 2013


On 4/12/2013 4:05 PM, Ed Sutter wrote:
> Hi,
> Not sure, but I think I stumbled on what may be a problem with the
> session_identification() function...
>
> Shouldn't the strncmp() at the bottom of the function only be executed
> if the done flag is true?  Seems to me that this could cause a crash 
> because
> ses.remoteident may be NULL.
>
> Ed
False alarm (Sorry)...
I see in the case of the standard build ses.remoteclosed() doesn't
return...


More information about the Dropbear mailing list