You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
During recent dynamic program analysis of the code, I noticed that there are a number of cases where allocated memory is not correctly free()'ed. This happens mainly due to suboptimal memory handling in error cases.
The practical impact of the memory leaks is close to zero on normal usage since the command line programs exit after a brief run. As briefly discussed with @nevun, I'm not aware of any security impact.
During recent dynamic program analysis of the code, I noticed that there are a number of cases where allocated memory is not correctly
free()
'ed. This happens mainly due to suboptimal memory handling in error cases.The practical impact of the memory leaks is close to zero on normal usage since the command line programs exit after a brief run. As briefly discussed with @nevun, I'm not aware of any security impact.
ykpers-args.c
key_tmp
yubikey-personalization/ykpers-args.c
Lines 789 to 799 in 6212797
calloc()
viaprompt_for_data()
, problematic in thereturn 0;
case.ykpers-args.c
uidtmp
yubikey-personalization/ykpers-args.c
Lines 554 to 559 in 6212797
calloc()
viaprompt_for_data()
, problematic in thereturn 0;
case.ykpersonalize.c
yubikey-personalization/ykpersonalize.c
Line 244 in 6212797
I think this should likely go through the error handling (although the
exit(1)
will properly unclaim the memory as well):The text was updated successfully, but these errors were encountered: