Bug#700805: openconnect: Fix for CVE-2012-6128 causes memory leak on error

forwarded 700805 http://lists.infradead.org/pipermail/openconnect-devel/2013-February/000838.html tags 700805 + upstream thanks On Sun, Feb 17, 2013 at 12:56 PM, Niels Thykier wrote: > If realloc fails, it will return NULL but without freeing the original > buffer. This means the marked code will

Bug#700805: openconnect: Fix for CVE-2012-6128 causes memory leak on error

Package: openconnect Version: 3.20-3 Severity: normal ++ ++static void buf_append(struct oc_text_buf *buf, const char *fmt, ...) ++{ ++ va_list ap; [...] ++ ++ buf->data = realloc(buf->data, new_buf_len); ^ ++