Hello everybody, we at suse ran address sanitizer against libnettle and found two bugs [1][2].
The first one is easy to fix (simple off by one) and thus we already have the patch (see attachment 0001-...). The second one is about memory leaks, and it would be better if someone more aware of the source took a look wether and how to fix it. Cheers Tom [1] https://bugzilla.suse.com/show_bug.cgi?id8328 [2] https://bugzilla.suse.com/show_bug.cgi?id9109 PS: I am not subscribed so keep me in CC please.
From 0d90cc412d43f4a50fb572e55a73f3f47e880309 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Tomáš Chvátal?= <[email protected]> Date: Wed, 3 Jun 2015 13:04:39 +0200 Subject: [PATCH] Fix off-by-one in des-compat test MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Tomáš Chvátal <[email protected]> --- testsuite/des-compat-test.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/testsuite/des-compat-test.c b/testsuite/des-compat-test.c index 9e31f1c..3bc04de 100644 --- a/testsuite/des-compat-test.c +++ b/testsuite/des-compat-test.c @@ -346,7 +346,7 @@ test_main(void) #ifndef LIBDES_LIT if (verbose) printf("Doing ede ecb\n"); - for (i=0; i<(NUM_TESTS-1); i++) + for (i=0; i<(NUM_TESTS-2); i++) { if ((j�s_key_sched(&key_data[i], ks)) != 0) { -- 2.4.1
signature.asc
Description: This is a digitally signed message part.
_______________________________________________ nettle-bugs mailing list [email protected] http://lists.lysator.liu.se/mailman/listinfo/nettle-bugs
