security-and-privacy/gnupg
security-and-privacy/gnupg
1
0
Fork 0
mirror of git://git.gnupg.org/gnupg.git synced 2025-07-03 22:56:33 +02:00
Code Activity

(encode_session_key): Changed the zero random byte

Browse source 
substituting code to actually do clever things.  Thanks to
Matthias Urlichs for noting the implementation problem.
This commit is contained in:
Werner Koch 2004-08-19 10:12:54 +00:00
parent 75ac082a76
commit bf256b9696
2 changed files with 11 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

7
g10/seskey.c
View file

@ -117,11 +117,14 @@ encode_session_key( DEK *dek, unsigned nbits )
k++;
if( !k )
break; /* okay: no zero bytes */
k += k/128; /* better get some more */
k += k/128 + 3; /* better get some more */
pp = get_random_bits( k*8, 1, 1);
for(j=0; j < i && k ; j++ )
for(j=0; j < i && k ;) {
if( !p[j] )
p[j] = pp[--k];
if (p[j])
j++;
}
m_free(pp);
}
memcpy( frame+n, p, i );