#24247: Fuzzing: check_signature mock can be fooled by a really short key. ------------------------------+-------------------------------- Reporter: nickm | Owner: nickm Type: defect | Status: assigned Priority: Medium | Milestone: Tor: 0.3.2.x-final Component: Core Tor/Tor | Version: Severity: Normal | Keywords: Actual Points: | Parent ID: Points: | Reviewer: Sponsor: | ------------------------------+-------------------------------- Our mock function, mock_crypto_pk_public_checksig__nocheck, fails to behave properly when it gets a ridiculously short key: the caller will have allocated a small amount, but we'll write a 20-byte digest.
This is causing a false positive on OSS-Fuzz. -- Ticket URL: <https://trac.torproject.org/projects/tor/ticket/24247> Tor Bug Tracker & Wiki <https://trac.torproject.org/> The Tor Project: anonymity online
_______________________________________________ tor-bugs mailing list tor-bugs@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs