Date: Tue, 11 Nov 2025 16:51:18 +0000 From: bugzilla-noreply@freebsd.org To: bugs@FreeBSD.org Subject: [Bug 290956] sftp-server needs to check if localtime(3) has failed and must not pass a NULL pointer to strftime(3) Message-ID: <bug-290956-227@https.bugs.freebsd.org/bugzilla/>
index | next in thread | raw e-mail
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=290956 Bug ID: 290956 Summary: sftp-server needs to check if localtime(3) has failed and must not pass a NULL pointer to strftime(3) Product: Base System Version: 16.0-CURRENT Hardware: Any OS: Any Status: New Severity: Affects Only Me Priority: --- Component: bin Assignee: bugs@FreeBSD.org Reporter: wosch@FreeBSD.org sftp-server needs to check whether localtime() has failed and must not pass a NULL pointer to strftime() - this would lead to a segfault crash. cd freebsd-src/crypto/openssh git grep -B 1 -n localtime sftp-server.c sftp-server.c-1015- strftime(buf, sizeof(buf), "%Y%m%d-%H:%M:%S", sftp-server.c:1016: localtime(&t)); -- sftp-server.c-1072- strftime(buf, sizeof(buf), "%Y%m%d-%H:%M:%S", sftp-server.c:1073: localtime(&t)); -- sftp-server.c-1495- strftime(buf, sizeof(buf), "%Y%m%d-%H:%M:%S", sftp-server.c:1496: localtime(&t)); -- You are receiving this mail because: You are the assignee for the bug.home | help
Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-290956-227>