untrusted comment: verify with openbsd-68-base.pub
RWQZj25CSG5R2jXT18ljuReFZuJ/Z0SvbsE0t0V2fRrwG5ly83RhICQ2dRaSJWA76OzM/bQj/u1DPZDHtbDA5Ivr2iTj6EApuwg=
OpenBSD 6.8 errata 001, October 29, 2020:
In bgpd, the roa-set parser could leak memory.
Apply by doing:
signify -Vep /etc/signify/openbsd-68-base.pub -x 001_bgpd.patch.sig \
-m - | (cd /usr/src && patch -p0)
And then rebuild and install bgpd:
cd /usr/src/usr.sbin/bgpd
make obj
make
make install
Index: usr.sbin/bgpd/parse.y
===================================================================
RCS file: /cvs/src/usr.sbin/bgpd/parse.y,v
retrieving revision 1.408
diff -u -p -r1.408 parse.y
--- usr.sbin/bgpd/parse.y 10 May 2020 13:38:46 -0000 1.408
+++ usr.sbin/bgpd/parse.y 26 Oct 2020 21:31:05 -0000
@@ -4513,6 +4513,8 @@ add_roa_set(struct prefixset_item *npsi,
psi = RB_INSERT(prefixset_tree, curpsitree, npsi);
if (psi == NULL)
psi = npsi;
+ else
+ free(npsi);
if (psi->set == NULL)
if ((psi->set = set_new(1, sizeof(rs))) == NULL)
