Code: char *strstr(char *s1, char *s2)
{                               /* from libiberty */
    char *p;
    int len = strlen(s2);
 
     if (*s2 == '\0')            /* everything matches empty string */
         return s1;
    for (p = s1; (p = strchr(p, *s2)) != NULL; p = strchr(p + 1, *s2)) {
         if (strncmp(p, s2, len) == 0)
             return (p);
     }
    return NULL;
}

Vulnerability Type: 
CWE ID: 
Summary: Boa through 0.94.14rc21 allows remote attackers to trigger a memory leak because of missing calls to the free function.
Commit Message: misc oom and possible memory leak fix