security-and-privacy/gnupg
security-and-privacy/gnupg
1
0
Fork 0
mirror of git://git.gnupg.org/gnupg.git synced 2025-07-02 22:46:30 +02:00
Code Activity

kbx: Avoid uninitialized read

Browse source 
* kbx/kbx-client-util.c (datastream_thread): Initialize pointer
* kbx/keybox-dump.c (_keybox_dump_cut_records): free blob
* kbx/kbxserver.c (kbxd_start_command_handler): do not free passed ctrl
* kbx/keyboxd.c (check_own_socket): free sockname

--

Signed-off-by: Jakub Jelen <jjelen@redhat.com>
GnuPG-bug-id: 5393
This commit is contained in:
Jakub Jelen 2021-04-12 21:59:17 +02:00 • committed by Werner Koch
parent fa0771f609
commit fc5fac83b7
No known key found for this signature in database
GPG key ID: E3FDFF218E45B72B
4 changed files with 9 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

3
kbx/kbx-client-util.c
View file

@ -176,7 +176,8 @@ datastream_thread (void *arg)
int rc;
unsigned char lenbuf[4];
size_t nread, datalen;
char *data, *tmpdata;
char *data = NULL;
char *tmpdata;
/* log_debug ("%s: started\n", __func__); */
while (kcd->fp)