From 5e4776146552d898b9c0e1b313cd093fa8dc92d0 Mon Sep 17 00:00:00 2001 From: Will Cosgrove Date: Thu, 2 Jul 2026 11:00:23 -0700 Subject: [PATCH] Prevent dangling pointer by nullifying data (#2180) Set data to NULL after freeing it to avoid dangling pointer. fixes GHSA-px3w-7g75-hg7w. Credit: VladimirEliTokarev --- src/sftp.c | 1 + 1 file changed, 1 insertion(+) Index: libssh2-1.11.0/src/sftp.c =================================================================== --- libssh2-1.11.0.orig/src/sftp.c +++ libssh2-1.11.0/src/sftp.c @@ -1274,6 +1274,7 @@ sftp_open(LIBSSH2_SFTP *sftp, const char "got HANDLE FXOK!")); LIBSSH2_FREE(session, data); + data = NULL; /* silly situation, but check for a HANDLE */ rc = sftp_packet_require(sftp, SSH_FXP_HANDLE,