From 75b0db1a286f936a90683973efc2315a07c03b21 Mon Sep 17 00:00:00 2001 From: Michael Gran Date: Wed, 30 Dec 2020 15:16:02 -0800 Subject: [PATCH] getsockopt may return garbage for parameters < sizeof(int) Uninitialized variable. * libguile/socket.c (scm_getsockopt): zeroize arguments before use --- libguile/socket.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/libguile/socket.c b/libguile/socket.c index 64354f1f1..8af6f57bf 100644 --- a/libguile/socket.c +++ b/libguile/socket.c @@ -1,4 +1,4 @@ -/* Copyright 1996-1998,2000-2007,2009,2011-2015,2018 +/* Copyright 1996-1998,2000-2007,2009,2011-2015,2018,2021 Free Software Foundation, Inc. This file is part of Guile. @@ -493,6 +493,7 @@ SCM_DEFINE (scm_getsockopt, "getsockopt", 3, 0, 0, int ilevel; int ioptname; + memset (&optval, 0, optlen); sock = SCM_COERCE_OUTPORT (sock); SCM_VALIDATE_OPFPORT (1, sock); ilevel = scm_to_int (level);