Hi Andreas,

just did a
  svn co http://www.opensc-project.org/svn/engine_pkcs11/trunk/

- the SLOT:ID patch is in the trunk.
- the PIN code of length 12 can still cause coredumps due to a missing 
'\0' : a buffer is calloc'ed of 12 bytes; if I fill this buffer with 12 
bytes (i.e. the user types in a PIN code of 12 characters) then there's 
no room for a '\0' . the openssl code specifies that this is OK but the 
engine_pkcs11.c file then does a strlen(pin) ...

cheers,

Jan Just Keijser

Andreas Jellinghaus wrote:
> hi Jan,
>
>   
>> - PIN code of length 12 can cause random coredumps; I've also increased
>> the max PIN length to 31 as our eTokens support longer PIN's than 12 chars.
>> - using the openssl  CAkey specify SLOT:ID does not work when the ID
>> contains the letters A-F
>>     
>
> can you check if code from svn trunk already works? I think I got a similar
> patch at least twice and trunk is already fixed, but I'm not 100% sure
> (and without net at home so i can't really work on opensc&co right now).
>
>   

_______________________________________________
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel

Reply via email to