CVS commit: pkgsrc/security/netpgpverify/files

["Alistair G. Crooks" <agc%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   agc
Date:           Thu Oct  3 20:18:13 UTC 2019

Modified Files:
        pkgsrc/security/netpgpverify/files: bignum.c verify.h

Log Message:
Bump netpgpverify and libnetpgpverify to 20191003 - fix problem
pointed out by mrg and gcc8:

+ don't read an automatic array element we haven't already written


To generate a diff of this commit:
cvs rdiff -u -r1.10 -r1.11 pkgsrc/security/netpgpverify/files/bignum.c
cvs rdiff -u -r1.40 -r1.41 pkgsrc/security/netpgpverify/files/verify.h

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/netpgpverify/files/bignum.c
diff -u pkgsrc/security/netpgpverify/files/bignum.c:1.10 pkgsrc/security/netpgpverify/files/bignum.c:1.11
--- pkgsrc/security/netpgpverify/files/bignum.c:1.10    Wed Jan 16 00:33:12 2019
+++ pkgsrc/security/netpgpverify/files/bignum.c Thu Oct  3 20:18:12 2019
@@ -2308,7 +2308,7 @@ fast_col_array_multiply(mp_int * a, mp_i
                tmpc = c->dp;
                for (ix = 0; ix < pa+1; ix++) {
                        /* now extract the previous digit [below the carry] */
-                       *tmpc++ = W[ix];
+                       *tmpc++ = (ix < pa) ? W[ix] : 0;
                }
 
                /* clear unused digits [that existed in the old copy of c] */

Index: pkgsrc/security/netpgpverify/files/verify.h
diff -u pkgsrc/security/netpgpverify/files/verify.h:1.40 pkgsrc/security/netpgpverify/files/verify.h:1.41
--- pkgsrc/security/netpgpverify/files/verify.h:1.40    Thu Jan 17 17:26:23 2019
+++ pkgsrc/security/netpgpverify/files/verify.h Thu Oct  3 20:18:13 2019
@@ -23,9 +23,9 @@
  * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  */
 #ifndef NETPGP_VERIFY_H_
-#define NETPGP_VERIFY_H_       20190117
+#define NETPGP_VERIFY_H_       20191003
 
-#define NETPGPVERIFY_VERSION   "netpgpverify portable 20190117"
+#define NETPGPVERIFY_VERSION   "netpgpverify portable 20191003"
 
 #include <sys/types.h>