-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

At several points throughout ne_auth.c, potentially unaligned char[16]
buffers are used as MD5 result output buffers.

On a platform where alignment matters, such as sparc, this can result in
bus errors.

One solution is to declare the buffers as md5_uint32[4].
Incidentally, it might well be a good idea to rename that type to
ne_md5_uint32, since it is visible in a public header file.

In any case, it would probably be best for neon to explicitly specify
the preferred way of declaring an MD5 result output buffer for the
ne_md5 API - that way, client applications can be confident they are
behaving appropriately.

Max.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (Cygwin)

iD8DBQFD1VklfFNSmcDyxYARAngHAKCh6ZOH742phXjaTD9U2cyVSSLj/QCfefHi
woZwWlGJWkK2WIbM3/he6oA=
=q30O
-----END PGP SIGNATURE-----
_______________________________________________
neon mailing list
[email protected]
http://mailman.webdav.org/mailman/listinfo/neon

Reply via email to