NetBSD-Bugs archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

lib/44040: libnetpgp: do not segfault when verifying clearsigned messages :)



>Number:         44040
>Category:       lib
>Synopsis:       libnetpgp: do not segfault when verifying clearsigned messages 
>:)
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    lib-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Thu Nov 04 15:55:00 +0000 2010
>Originator:     Peter Pentchev
>Release:        
>Organization:
>Environment:
>Description:
Once again, thanks for maintaining netpgp!

The attached patch fixes two problems when verifying a clearsigned message:
- a copy/paste error - "litdata should" be "cleartext"
- a use of an uninitialized variable, resulting in freeing
  an uninitialized pointer on the stack... resulting in a segfault

>How-To-Repeat:
Try to verify the simple clearsigned message available at:
http://devel.ringlet.net/security/netpgp/foo.txt.asc
>Fix:
Apply the patch available at:
http://devel.ringlet.net/security/netpgp/patches/05-cleartext-data.patch

Keep up the great work!



Home | Main Index | Thread Index | Old Index