NetBSD-Bugs archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
lib/44040: libnetpgp: do not segfault when verifying clearsigned messages :)
>Number: 44040
>Category: lib
>Synopsis: libnetpgp: do not segfault when verifying clearsigned messages
>:)
>Confidential: no
>Severity: non-critical
>Priority: low
>Responsible: lib-bug-people
>State: open
>Class: sw-bug
>Submitter-Id: net
>Arrival-Date: Thu Nov 04 15:55:00 +0000 2010
>Originator: Peter Pentchev
>Release:
>Organization:
>Environment:
>Description:
Once again, thanks for maintaining netpgp!
The attached patch fixes two problems when verifying a clearsigned message:
- a copy/paste error - "litdata should" be "cleartext"
- a use of an uninitialized variable, resulting in freeing
an uninitialized pointer on the stack... resulting in a segfault
>How-To-Repeat:
Try to verify the simple clearsigned message available at:
http://devel.ringlet.net/security/netpgp/foo.txt.asc
>Fix:
Apply the patch available at:
http://devel.ringlet.net/security/netpgp/patches/05-cleartext-data.patch
Keep up the great work!
Home |
Main Index |
Thread Index |
Old Index