[SSSD] [PATCH] Out-of-bounds read fix in hmac-sha-1

Michal Židek mzidek at redhat.com
Fri Sep 7 11:24:49 UTC 2012


On 09/07/2012 10:56 AM, Ondrej Kos wrote:
> fixes https://fedorahosted.org/sssd/ticket/1331
>
> Although the given memset wasn't doing anything when *key_len ==
> HMAC_SHA1_BLOCKSIZE* (length of bytes to set was 0), the first argument
> to memset was an address starting right after the key itself -
> out-of-bounds.
>
> O.
>
>
> _______________________________________________
> sssd-devel mailing list
> sssd-devel at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-devel
>

ACK.



More information about the sssd-devel mailing list