[xml-security-c] 08/21: loadX509PEM: fix potential reading past unterminated buffer

Ferenc Wágner wferi-guest at moszumanska.debian.org
Mon Jun 27 12:20:25 UTC 2016


This is an automated email from the git hooks/post-receive script.

wferi-guest pushed a commit to branch patch-queue/warn-fixes
in repository xml-security-c.

commit b98a087297fb1a7e9483eb09ed51175a65f47538
Author: Ferenc Wágner <wferi at niif.hu>
Date:   Sat Jan 30 23:11:00 2016 +0100

    loadX509PEM: fix potential reading past unterminated buffer
---
 xsec/enc/XSECCryptoX509.cpp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/xsec/enc/XSECCryptoX509.cpp b/xsec/enc/XSECCryptoX509.cpp
index f87f746..2682e70 100644
--- a/xsec/enc/XSECCryptoX509.cpp
+++ b/xsec/enc/XSECCryptoX509.cpp
@@ -46,7 +46,7 @@ void XSECCryptoX509::loadX509PEM(const char * buf, unsigned int len) {
 		b = b1;
 	}
 
-	const char *p = strstr(buf, "-----BEGIN CERTIFICATE-----");
+	const char *p = strstr(b, "-----BEGIN CERTIFICATE-----");
 
 	if (p == NULL) {
 

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-shibboleth/xml-security-c.git



More information about the Pkg-shibboleth-devel mailing list