#750 closed defect (fixed)

NULL pointer derefernce in wait_input().

Reported by: osv2 Owned by: Eric Norum
Priority: highest Milestone: 2
Component: network/legacy Version: 4.6
Severity: critical Keywords:
Cc: bugs@…, joel.sherrill@… Blocked By:


The wait_input() routine in pppd/sys-rtems.c dereferences NULL pointer when called with 'timo' parameter NULL that should indicate indefinite timeout. It's in fact called with timeo=NULL when no more timeouts are left in the callouts queue, see pppd/rtemsmain.c/timeleft() routine.


The attached patch fixes that.

Attachments (1)

rtems-cvs-20050121-sys-rtems-wait_input.patch.gz (525 bytes) - added by osv2 on 12/03/06 at 13:31:13.

Download all attachments as: .zip

Change History (3)

comment:1 Changed on 05/20/05 at 18:33:39 by Joel Sherrill

Status: assignedclosed

State-Changed-From-To: open->closed
State-Changed-Why: Patch applied.

Changed on 12/03/06 at 13:31:13 by osv2


comment:2 Changed on 10/10/17 at 06:44:19 by Sebastian Huber

Component: pppdnetwork/legacy
Note: See TracTickets for help on using tickets.