- CVE-2006-5051: Fix an unsafe signal hander reported by Mark Dowd. The

    signal handler was vulnerable to a race condition that could be
    exploited to perform a pre-authentication denial of service. On
    portable OpenSSH, this vulnerability could theoretically lead to
    pre-authentication remote code execution if GSSAPI authentication is
    enabled, but the likelihood of successful exploitation appears remote.

1 files changed, 12 insertions, 0 deletions

diff --git a/log.c b/log.c
index c09786ade..07f866230 100644
--- a/log.c
+++ b/log.c
@@ -131,6 +131,18 @@ error(const char *fmt,...)
         va_end(args);
 }
 
+void
+sigdie(const char *fmt,...)
+{
+        va_list args;
+
+        va_start(args, fmt);
+        do_log(SYSLOG_LEVEL_FATAL, fmt, args);
+        va_end(args);
+        _exit(1);
+}
+
+
 /* Log this message (information that usually should go to the log). */
 
 void