* New upstream release (http://www.openssh.com/txt/release-6.4).

  - sshd(8): fix a memory corruption problem triggered during rekeying
    when an AES-GCM cipher is selected (closes: #729029).  Full details
    of the vulnerability are available at:
    http://www.openssh.com/txt/gcmrekey.adv

1 files changed, 2 insertions, 2 deletions

diff --git a/gss-genr.c b/gss-genr.c
index 3069347c2..b7d1b7dbf 100644
--- a/gss-genr.c
+++ b/gss-genr.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: gss-genr.c,v 1.21 2013/05/17 00:13:13 djm Exp $ */
+/* $OpenBSD: gss-genr.c,v 1.22 2013/11/08 00:39:15 djm Exp $ */
 
 /*
  * Copyright (c) 2001-2009 Simon Wilkinson. All rights reserved.
@@ -217,7 +217,7 @@ ssh_gssapi_set_oid_data(Gssctxt *ctx, void *data, size_t len)
                 free(ctx->oid->elements);
                 free(ctx->oid);
         }
-        ctx->oid = xmalloc(sizeof(gss_OID_desc));
+        ctx->oid = xcalloc(1, sizeof(gss_OID_desc));
         ctx->oid->length = len;
         ctx->oid->elements = xmalloc(len);
         memcpy(ctx->oid->elements, data, len);