[src/trunk]: src/crypto/dist/ipsec-tools/src/racoon Protect against a NULL po...

[christos <christos%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/d7105ce68fa7
branches:  trunk
changeset: 338350:d7105ce68fa7
user:      christos <christos%NetBSD.org@localhost>
date:      Tue May 19 15:14:25 2015 +0000

description:
Protect against a NULL pointer dereference described in:

    https://www.altsci.com/ipsec/

XXX: pullup-7

diffstat:

 crypto/dist/ipsec-tools/src/racoon/gssapi.c |  6 +++++-
 1 files changed, 5 insertions(+), 1 deletions(-)

diffs (20 lines):

diff -r 0cb358989037 -r d7105ce68fa7 crypto/dist/ipsec-tools/src/racoon/gssapi.c
--- a/crypto/dist/ipsec-tools/src/racoon/gssapi.c       Tue May 19 13:20:52 2015 +0000
+++ b/crypto/dist/ipsec-tools/src/racoon/gssapi.c       Tue May 19 15:14:25 2015 +0000
@@ -1,4 +1,4 @@
-/*     $NetBSD: gssapi.c,v 1.4 2006/09/09 16:22:09 manu Exp $  */
+/*     $NetBSD: gssapi.c,v 1.5 2015/05/19 15:14:25 christos Exp $      */
 
 /*     $KAME: gssapi.c,v 1.19 2001/04/03 15:51:55 thorpej Exp $        */
 
@@ -202,6 +202,10 @@
 
        gssapi_set_state(iph1, gps);
 
+       if (iph1->rmconf == NULL) {
+               plog(LLV_ERROR, LOCATION, NULL, "no remote config\n");
+               return -1;
+       }
        if (iph1->rmconf->proposal->gssid != NULL) {
                id_token.length = iph1->rmconf->proposal->gssid->l;
                id_token.value = iph1->rmconf->proposal->gssid->v;