Changeset ccfa7d1 for zcrypt.c

Timestamp:

Mar 1, 2010, 8:33:48 PM (13 years ago)

Author:

Nelson Elhage <nelhage@mit.edu>

Branches:

release-1.5

Children:

212d8b7

Parents:

19b2766

git-author:

Anders Kaseorg <andersk@mit.edu> (02/08/10 22:35:46)

git-committer:

Nelson Elhage <nelhage@mit.edu> (03/01/10 20:33:48)

Message:

zcrypt: Don’t read off the end of misaligned input messages.

This fixes an input buffer overflow noticed by asedeno and andersk.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>
Reviewed-by: Nelson Elhage <nelhage@mit.edu>

File:

• zcrypt.c (modified) (1 diff)

zcrypt.c

@@ -113 +113 @@
 
   inptr=in;
-  endptr=in+strlen(in)-1;
-  while (inptr<endptr) {
+  endptr = in + strlen(in);
+  while (inptr + 16 <= endptr) {
     for (i=0; i<8; i++) {
       c1=(inptr[0])-BASE_CODE;