- tobias@cvs.openbsd.org 2009/03/23 08:31:19

     [ssh-agent.c]
     Fixed a possible out-of-bounds memory access if the environment variable
     SHELL is shorter than 3 characters.
     with input by and ok dtucker

1 files changed, 2 insertions, 2 deletions

diff --git a/ssh-agent.c b/ssh-agent.c
index 9123cfe6b..1a54a2784 100644
--- a/ssh-agent.c
+++ b/ssh-agent.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ssh-agent.c,v 1.159 2008/06/28 14:05:15 djm Exp $ */
+/* $OpenBSD: ssh-agent.c,v 1.160 2009/03/23 08:31:19 tobias Exp $ */
 /*
  * Author: Tatu Ylonen <ylo@cs.hut.fi>
  * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
@@ -1122,7 +1122,7 @@ main(int ac, char **av)
         if (ac == 0 && !c_flag && !s_flag) {
                 shell = getenv("SHELL");
                 if (shell != NULL &&
-                    strncmp(shell + strlen(shell) - 3, "csh", 3) == 0)
+                    strncmp(shell + MAX(strlen(shell) - 3, 0), "csh", 3) == 0)
                         c_flag = 1;
         }
         if (k_flag) {