- markus@cvs.openbsd.org 2003/09/18 08:49:45

     [deattack.c misc.c session.c ssh-agent.c]
     more buffer allocation fixes; from Solar Designer; CAN-2003-0682;
     ok millert@

1 files changed, 3 insertions, 3 deletions

diff --git a/deattack.c b/deattack.c
index 0442501e7..8b55d6686 100644
--- a/deattack.c
+++ b/deattack.c
@@ -18,7 +18,7 @@
  */
 
 #include "includes.h"
-RCSID("$OpenBSD: deattack.c,v 1.18 2002/03/04 17:27:39 stevesk Exp $");
+RCSID("$OpenBSD: deattack.c,v 1.19 2003/09/18 08:49:45 markus Exp $");
 
 #include "deattack.h"
 #include "log.h"
@@ -100,12 +100,12 @@ detect_attack(u_char *buf, u_int32_t len, u_char *IV)
 
         if (h == NULL) {
                 debug("Installing crc compensation attack detector.");
+                h = (u_int16_t *) xmalloc(l * HASH_ENTRYSIZE);
                 n = l;
-                h = (u_int16_t *) xmalloc(n * HASH_ENTRYSIZE);
         } else {
                 if (l > n) {
+                        h = (u_int16_t *) xrealloc(h, l * HASH_ENTRYSIZE);
                         n = l;
-                        h = (u_int16_t *) xrealloc(h, n * HASH_ENTRYSIZE);
                 }
         }