ossec 2.9 ossec-remoted have dos vul

[wawava]

Hi all
i'm use ossec 2.9 ,find a dos vul in the test

in os_crypto/shared/msgs.c file

        /* Check if it is a duplicated message */
        if (msg_global == keys->keyentries[id]->global) {
            return (NULL);
        }

when reinstall ossec agent ,and use old authentication key to connect ossec server, 
server think the new message is a duplicated message and return (NULL)

in remoted/secure.c file

        if (tmp_msg == NULL) {
            /* If duplicated, a warning was already generated */
            continue;
        }

but tmg_msg == NULL is false, the ossec-remoted process will crash in

IsValidHeader(tmp_msg) function

please fix the bug,thx

[wawava]

please modify msgs.c file code

        /* Check if it is a duplicated message */
        if (msg_global == keys->keyentries[id]->global) {
            return (NULL);
        }

        /* Warn about duplicated messages */
        merror("%s: WARN: Duplicate error:  global: %u, local: %u, "
               "saved global: %u, saved local:%u",
               __local_name,
               msg_global,
               msg_local,
               keys->keyentries[id]->global,
               keys->keyentries[id]->local);

to

        /* Check if it is a duplicated message */
        if (msg_global == keys->keyentries[id]->global) {
            /* Warn about duplicated messages */
            merror("%s: WARN: Duplicate error:  global: %u, local: %u, "
                "saved global: %u, saved local:%u",
                __local_name,
                msg_global,
                msg_local,
                keys->keyentries[id]->global,
                keys->keyentries[id]->local);
            return (NULL);
        }