[xml-security-c] 07/23: loadX509PEM: fix potential reading past unterminated buffer

Ferenc Wágner wferi-guest at moszumanska.debian.org
Thu Jul 21 20:15:41 UTC 2016


This is an automated email from the git hooks/post-receive script.

wferi-guest pushed a commit to branch patch-queue/master
in repository xml-security-c.

commit 8147fe985fe71adc152fcc10b9f2faeee565fb42
Author: Ferenc Wágner <wferi at niif.hu>
Date:   Sat Jan 30 23:11:00 2016 +0100

    loadX509PEM: fix potential reading past unterminated buffer
---
 xsec/enc/XSECCryptoX509.cpp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/xsec/enc/XSECCryptoX509.cpp b/xsec/enc/XSECCryptoX509.cpp
index f87f746..2682e70 100644
--- a/xsec/enc/XSECCryptoX509.cpp
+++ b/xsec/enc/XSECCryptoX509.cpp
@@ -46,7 +46,7 @@ void XSECCryptoX509::loadX509PEM(const char * buf, unsigned int len) {
 		b = b1;
 	}
 
-	const char *p = strstr(buf, "-----BEGIN CERTIFICATE-----");
+	const char *p = strstr(b, "-----BEGIN CERTIFICATE-----");
 
 	if (p == NULL) {
 

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-shibboleth/xml-security-c.git



More information about the Pkg-shibboleth-devel mailing list