[SSSD] [PATCH] Out-of-bounds read fix in hmac-sha-1

Ondrej Kos okos at redhat.com
Fri Sep 7 08:56:20 UTC 2012


fixes https://fedorahosted.org/sssd/ticket/1331

Although the given memset wasn't doing anything when *key_len == 
HMAC_SHA1_BLOCKSIZE* (length of bytes to set was 0), the first argument 
to memset was an address starting right after the key itself - 
out-of-bounds.

O.
-- 
Ondrej Kos
Associate Software Engineer
Identity Management
Red Hat Czech

cell:  +420-736-417-909
phone: +420-532-294-558
ext.:  82-62558
irc:   okos @ #brno
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Out-of-bounds-read-fix-in-hmac-sha-1.patch
Type: text/x-patch
Size: 1026 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20120907/392ff288/attachment.bin>


More information about the sssd-devel mailing list