[ntp:security] [Bug 2670] receive(): missing return on error

bugzilla-daemon at ntp.org bugzilla-daemon at ntp.org
Tue Nov 25 13:43:08 UTC 2014


http://bugs.ntp.org/show_bug.cgi?id=2670

--- Comment #3 from Stephen Röttger <stephen.roettger at gmail.com> 2014-11-25 13:43:08 UTC ---
I think the severity of this is very low.
What it does is, it adds a new peer connection and I tried to abuse this to
trigger a different bug. However, all code paths that can be reached from this
terminate the connection anyway and will remove the newly created peer
association.

-- 
Configure bugmail: http://bugs.ntp.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.


More information about the security mailing list