diff options
| author | Werner Koch <[email protected]> | 2015-03-15 12:04:48 +0000 |
|---|---|---|
| committer | Werner Koch <[email protected]> | 2015-03-15 12:04:48 +0000 |
| commit | 3529dd8bb5bafc4e02915648d5f409bd27a9cc37 (patch) | |
| tree | 9ee1854bee1818226808ebc8f78d81edfb275924 /common/argparse.c | |
| parent | agent: Remove useless conditions. (diff) | |
| download | gnupg-3529dd8bb5bafc4e02915648d5f409bd27a9cc37.tar.gz gnupg-3529dd8bb5bafc4e02915648d5f409bd27a9cc37.zip | |
agent: Fix length test in sshcontrol parser.
* agent/command-ssh.c (ssh_search_control_file): Check S before
upcasing it.
--
In contradiction to the comment we did not check the length of HEXGRIP
and thus the GPG_ERR_INV_LENGTH was never triggered.
Detected by Stack 0.3:
bug: anti-simplify
model: |
%cmp8 = icmp ne i32 %i.0, 40, !dbg !986
--> false
stack:
- /home/wk/s/gnupg/agent/command-ssh.c:1226:0
ncore: 2
core:
- /home/wk/s/gnupg/agent/command-ssh.c:1225:0
- buffer overflow
- /home/wk/s/gnupg/agent/command-ssh.c:1225:0
- buffer overflow
Diffstat (limited to 'common/argparse.c')
0 files changed, 0 insertions, 0 deletions