Re: [Rpm-maint] [rpm-software-management/rpm] heap out of bounds read in copyTdEntry() (#133)

2017-01-25 Thread Colin Walters
Need to check if this happens before GPG verification. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/rpm-software-management/rpm/issues/133#issuecomment-275155371__

Re: [Rpm-maint] [rpm-software-management/rpm] Add OpenSSL crypto backend (#129)

2017-01-25 Thread Stephen Gallagher
OK, new version of my patches, now supporting both OpenSSL 1.1.0 _and_ 1.0.2 I implemented `--with-crypto=CRYPTO_LIB` and made `--with-beecrypt` report an error. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://gith

[Rpm-maint] [rpm-software-management/rpm] heap out of bounds read in copyTdEntry() (#133)

2017-01-25 Thread Hanno Böck
The attached file will cause an out of bounds heap read access when passed to rpm (tested with rpm -i --test [input]). Found with american fuzzy lop and address sanitizer. [oob-heap-copyTdEntry.zip](https://github.com/rpm-software-management/rpm/files/729923/oob-heap-copyTdEntry.zip) Stack trac