Rev 1.25 introduced a mem-leak:

Index: usr.sbin/snmpd/usm.c
===================================================================
RCS file: /cvs/src/usr.sbin/snmpd/usm.c,v
retrieving revision 1.25
diff -u -p -r1.25 usm.c
--- usr.sbin/snmpd/usm.c        20 Dec 2022 20:01:25 -0000      1.25
+++ usr.sbin/snmpd/usm.c        8 May 2023 12:12:16 -0000
@@ -629,8 +629,10 @@ usm_decrypt(struct snmp_message *msg, st
                return NULL;
 
        scoped_pdu_len = usm_crypt(msg, privstr, (int)privlen, buf, 0);
-       if (scoped_pdu_len < 0)
+       if (scoped_pdu_len < 0) {
+               free(buf);
                return NULL;
+       }
 
        bzero(&ber, sizeof(ber));
        ober_set_application(&ber, smi_application);

Attachment: smime.p7s
Description: S/MIME cryptographic signature

Reply via email to