* New upstream release (http://www.openssh.com/txt/release-6.4).

  - sshd(8): fix a memory corruption problem triggered during rekeying
    when an AES-GCM cipher is selected (closes: #729029).  Full details
    of the vulnerability are available at:
    http://www.openssh.com/txt/gcmrekey.adv

1 files changed, 2 insertions, 2 deletions

diff --git a/authfd.c b/authfd.c
index 775786bee..5cce93b76 100644
--- a/authfd.c
+++ b/authfd.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: authfd.c,v 1.87 2013/05/17 00:13:13 djm Exp $ */
+/* $OpenBSD: authfd.c,v 1.88 2013/11/08 00:39:14 djm Exp $ */
 /*
  * Author: Tatu Ylonen <ylo@cs.hut.fi>
  * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
@@ -206,7 +206,7 @@ ssh_get_authentication_connection(void)
         if (sock < 0)
                 return NULL;
 
-        auth = xmalloc(sizeof(*auth));
+        auth = xcalloc(1, sizeof(*auth));
         auth->fd = sock;
         buffer_init(&auth->identities);
         auth->howmany = 0;