Martin Prikryl points out that need_pw may be used uninitialised.

[originally from svn r3751]

diff --git a/ssh.c b/ssh.c
index 22a0b452036d68558ad471e0f90f16c1f3b8b390..6c1aeb7529793dc00704682d7a4f465ab1371e2c 100644 (file)
--- a/ssh.c
+++ b/ssh.c
@@ -4744,6 +4744,7 @@ static void do_ssh2_authconn(Ssh ssh, unsigned char *in, int inlen, int ispkt)
 
            s->method = 0;
            ssh->pkt_ctx &= ~SSH2_PKTCTX_AUTH_MASK;
+           s->need_pw = FALSE;
 
            /*
             * Most password/passphrase prompts will be