diff options
| author | Werner Koch <[email protected]> | 2007-01-15 19:31:24 +0000 |
|---|---|---|
| committer | Werner Koch <[email protected]> | 2007-01-15 19:31:24 +0000 |
| commit | 006c5af165171ccb3787e074b9e0e224ecaacb79 (patch) | |
| tree | 850ceb40dbc5596f10dcb4c762a74f5fc92ada1a /g10/parse-packet.c | |
| parent | Add subjectAltName to the list of known critical extensions (diff) | |
| download | gnupg-006c5af165171ccb3787e074b9e0e224ecaacb79.tar.gz gnupg-006c5af165171ccb3787e074b9e0e224ecaacb79.zip | |
* parse-packet.c (read_protected_v3_mpi): Make sure to stop
reading even for corrupted packets.
* keygen.c (generate_user_id): Need to allocate one byte more.
Reported by Felix von Leitner.
Diffstat (limited to '')
| -rw-r--r-- | g10/parse-packet.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/g10/parse-packet.c b/g10/parse-packet.c index d60d5d7dd..ae0cc2821 100644 --- a/g10/parse-packet.c +++ b/g10/parse-packet.c @@ -1589,11 +1589,11 @@ read_protected_v3_mpi (IOBUF inp, unsigned long *length) buf = p = xmalloc (2 + nbytes); *p++ = nbits >> 8; *p++ = nbits; - for (; nbytes && length; nbytes--, --*length) + for (; nbytes && *length; nbytes--, --*length) *p++ = iobuf_get (inp); if (nbytes) { - log_error ("packet shorter tham mpi\n"); + log_error ("packet shorter than mpi\n"); xfree (buf); return NULL; } |