[Pkg-gnupg-maint] Bug#773470: Fwd: off-by-one

[Joshua Rogers]

Package: gnupg2
Version: 2.1.1
Severity: normal


Hi,

On line 1242 of app-nks.c, 'xtrymalloc' is called with 'datalen', which is calculated using "size_t datalen = oldpinlen + newpinlen"
This does not account for the null-bytes, and may cause either a buffer overflow, or other problems down the line.


Thanks,

-- 
-- Joshua Rogers <https://internot.info/>