Changeset 1f37eba for zcrypt.c

Timestamp:

Feb 9, 2010, 9:49:51 PM (15 years ago)

Author:

Anders Kaseorg <andersk@mit.edu>

Branches:

master, release-1.10, release-1.6, release-1.7, release-1.8, release-1.9

Children:

f61e7ac

Parents:

9be80b5

git-author:

Anders Kaseorg <andersk@mit.edu> (02/08/10 22:35:46)

git-committer:

Anders Kaseorg <andersk@mit.edu> (02/09/10 21:49:51)

Message:

zcrypt: Don’t read off the end of misaligned input messages.

This fixes an input buffer overflow noticed by asedeno and andersk.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>
Reviewed-by: Nelson Elhage <nelhage@mit.edu>

File:

• zcrypt.c (modified) (1 diff)

zcrypt.c

@@ -113 +113 @@
 
   inptr=in;
-  endptr=in+strlen(in)-1;
-  while (inptr<endptr) {
+  endptr = in + strlen(in);
+  while (inptr + 16 <= endptr) {
     for (i=0; i<8; i++) {
       c1=(inptr[0])-BASE_CODE;