On Fri, 2012-09-07 at 10:56 +0200, Ondrej Kos wrote:
fixes
https://fedorahosted.org/sssd/ticket/1331
Although the given memset wasn't doing anything when *key_len ==
HMAC_SHA1_BLOCKSIZE* (length of bytes to set was 0), the first argument
to memset was an address starting right after the key itself -
out-of-bounds.
I haven't looked at the rest of the code, but a more defensive way of
doing the test is checking key_len < HMAC_SHA1_BLOCKSIZE, and not just
checking it is different.
Simo.
--
Simo Sorce * Red Hat, Inc * New York