Hi Debian and Ubuntu chntpw maintainers,

See below for a small patch which fixes a corruption issue when
editing REG_MULTI_SZ values.
I've sent it to Petter (upstream author) who has accepted it.
I don't believe he has any plans to make a new release soon though, so
you may wish to add it as a debian/patch in the meantime.

Thanks,
Dave



---------- Forwarded message ----------
From: David Collett <david.coll...@gmail.com>
Date: 18 June 2012 11:38
Subject: patch for chntpw
To: p...@pogostick.net


Hi,

Attached is a very small patch to fix a bug with REG_MULTI_SZ editing.
The multi-sz was not correctly null terminated, leading to possible
erroneous extra values.
The original code incorrectly incremented the 'in' variable before
null-terminating the array causing it to skip one byte before
terminating. (Valgrind was able to find this error).
The patch simply switches the order of two lines.

Thanks,
Dave

Attachment: chntpw-110511-multi-sz-fix.patch
Description: Binary data

-- 
Ubuntu-motu mailing list
Ubuntu-motu@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-motu

Reply via email to