]> git.ozlabs.org Git - ppp.git/commit
projects / ppp.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: ba7f7e0) | patch
Fix out-of-bounds accesses to ZPasswordHash arrays (#395)
authorEivind Næss <eivnaes@yahoo.com>
Mon, 6 Mar 2023 07:03:13 +0000 (23:03 -0800)
committerGitHub <noreply@github.com>
Mon, 6 Mar 2023 07:03:13 +0000 (18:03 +1100)
commit3de4392234241ae91300854264864da213a49b10
tree3cb715ed260ba6d4e113d6f5671bb149e284cf28tree | snapshot (tar.gz zip)
parentba7f7e053daae846a54a1d08d3d133a5f1266acecommit | diff
Fix out-of-bounds accesses to ZPasswordHash arrays (#395)

* Add 'const' parameter to input arguments in crypto_ms.*

* Round ZPasswordHash buffers up to 24 bytes, as the DES MakeKey() function
  accesses ZPasswordHash[21]

Closes github issue #392

[paulus@ozlabs.org - tidied up headline and commit message]

Signed-off-by: Eivind Næss <eivnaes@yahoo.com>
pppd/chap_ms.c diff | blob | history
pppd/crypto_ms.c diff | blob | history
pppd/crypto_ms.h diff | blob | history
PPP (Point-to-Point Protocol) implementation for Linux and Solaris