diff options
| author | jsing <> | 2015-10-21 16:36:50 +0000 |
|---|---|---|
| committer | jsing <> | 2015-10-21 16:36:50 +0000 |
| commit | 8e683fccb8989afc1e9e74f5dc0a49b5a0275ec3 (patch) | |
| tree | d9ddeefeaea4e28bd9fe864f51bf2a6bfef681f5 /src/regress/lib/libc/sigthr/sigthr_test.c | |
| parent | ef26ca54172e50b3204589c7474e95b12345d711 (diff) | |
| download | openbsd-8e683fccb8989afc1e9e74f5dc0a49b5a0275ec3.tar.gz openbsd-8e683fccb8989afc1e9e74f5dc0a49b5a0275ec3.tar.bz2 openbsd-8e683fccb8989afc1e9e74f5dc0a49b5a0275ec3.zip | |
In the case where len is not a multiple of sizeof(RC4_CHUNK) the RC4 code
will end up doing a read and write of up to 7 bytes beyond the specified
length. This is effectively a non-issue since we read and write back the
same data and due to alignment it is within a page boundary.
Regardless, avoid this by removing the "special" handling for the remaining
length and allow the standard (non-chunk) code to process the remaining
bytes, which does not result in overrun.
Reported by Pascal Cuoq <cuoq at trust-in-soft.com> - thanks!
ok beck@ miod@
Diffstat (limited to 'src/regress/lib/libc/sigthr/sigthr_test.c')
0 files changed, 0 insertions, 0 deletions