CVSROOT:        /cvs
Module name:    src
Changes by:     d...@cvs.openbsd.org    2013/03/15 06:20:11

Modified files:
        usr.sbin/tftpd : tftpd.c 

Log message:
fix a huge bug in tftpd.

there was a double free if an option ack failed. if oack fails, the client
gets freed, then the oack caller tries to free the options which were just
freed.

found by Maxime Villard who provided a fix. unfortunately his fix still
had a double free but it was pretty close.
ok MALLOC_OPTIONS=S

Reply via email to