[Pkg-gnupg-maint] Bug#773502: off-by-one memory assignment

Joshua Rogers honey at internot.info
Fri Dec 19 08:47:57 UTC 2014


Package: gnupg2
Version: 2.1.1
Severity: normal

in app-nks.c on line 1242, data is assigned the memory of 'datalen', which is calculated using oldpinlen + newpinlen.
The problem is, it doesn't account for the terminating null byte, so it should be datalen + 1(or, +2?, will need to check.)

Thanks

-- 
-- Joshua Rogers <https://internot.info/>



More information about the Pkg-gnupg-maint mailing list