security-and-privacy/gnupg
security-and-privacy/gnupg
1
0
Fork 0
mirror of git://git.gnupg.org/gnupg.git synced 2025-04-13 22:21:09 +02:00
Code Activity

gpg: Fix the fix out-of-bounds access.

Browse Source 
* g10/tofu.c (build_conflict_set): Revert to int* and fix calloc.
--

The original code used an int array and thus better keep that and do
not limit it to 128 entries.

Fixes-commit: c3008bffac68b6f31e9ae9bad837cdce5de7c0db
Fixes-commit: 3b5b94ceab7c0ed9501c5cf54b4efa17fcd7300a
Signed-off-by: Werner Koch <wk@gnupg.org>
This commit is contained in:
Werner Koch 2016-12-08 17:03:26 +01:00
parent d8c5e8ccfd
commit a75790b740
No known key found for this signature in database
GPG Key ID: E3FDFF218E45B72B
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
g10/tofu.c
View File

@ -2227,10 +2227,10 @@ build_conflict_set (tofu_dbs_t dbs,
int j; int j;
strlist_t *prevp; strlist_t *prevp;
strlist_t iter_next; strlist_t iter_next;
char *die; int *die;
log_assert (conflict_set_count > 0); log_assert (conflict_set_count > 0);
die = xtrycalloc (1, conflict_set_count); die = xtrycalloc (conflict_set_count, sizeof *die);
if (!die) if (!die)
{ {
/*err = gpg_error_from_syserror ();*/ /*err = gpg_error_from_syserror ();*/