mirror of
https://github.com/openssh/libopenssh
synced 2026-04-18 02:36:24 +00:00
monitor.c: missing p -> username conversion (use-after-free)
This commit is contained in:
@@ -980,7 +980,7 @@ monitor_valid_userblob(u_char *data, u_int datalen)
|
||||
fatal("%s: buffer error: %s", __func__, ssh_err(r));
|
||||
if (strcmp(authctxt->user, username) != 0) {
|
||||
logit("wrong user name sent to monitor: expected %s != %.100s",
|
||||
authctxt->user, p);
|
||||
authctxt->user, username);
|
||||
fail++;
|
||||
}
|
||||
xfree(username);
|
||||
|
||||
Reference in New Issue
Block a user