On Fri, 23 May 2025 23:52, Collin Funk said:

> -  else if (toklen == 10 || !memcmp ("public-key", tok, toklen))
> +  else if (toklen == 10 && !memcmp ("public-key", tok, toklen))

Uiih, a classic brown paper bag bug for me.  Fortunately the code is
only used by PKCS#15 cards as an early check for a proper public key.

Thanks.  Will be applied soon.


Salam-Shalom,

   Werner

-- 
The pioneers of a warless world are the youth that
refuse military service.             - A. Einstein

Attachment: openpgp-digital-signature.asc
Description: PGP signature

_______________________________________________
Gnupg-devel mailing list
Gnupg-devel@gnupg.org
https://lists.gnupg.org/mailman/listinfo/gnupg-devel

Reply via email to