[SSSD] [PATCH] Out-of-bounds read fix in hmac-sha-1

Jakub Hrozek jhrozek at redhat.com
Fri Sep 7 12:11:49 UTC 2012


On Fri, Sep 07, 2012 at 01:24:49PM +0200, Michal Židek wrote:
> On 09/07/2012 10:56 AM, Ondrej Kos wrote:
> >fixes https://fedorahosted.org/sssd/ticket/1331
> >
> >Although the given memset wasn't doing anything when *key_len ==
> >HMAC_SHA1_BLOCKSIZE* (length of bytes to set was 0), the first argument
> >to memset was an address starting right after the key itself -
> >out-of-bounds.
> >
> >O.
> >
> >
> >_______________________________________________
> >sssd-devel mailing list
> >sssd-devel at lists.fedorahosted.org
> >https://lists.fedorahosted.org/mailman/listinfo/sssd-devel
> >
> 
> ACK.

Pushed to master.



More information about the sssd-devel mailing list