Hi,

> Are we sure we can't call this function with 'len' longer than the
> available space in 'key' ?


Yep, because we get available space here:

> +    const int len = BCAP(key);
>

and then pass it to rand_bytes:


> > +    if (!rand_bytes(BEND(key), len))


-- 
-Lev
_______________________________________________
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Reply via email to