diff options
| author | Robin Krahl <me@robin-krahl.de> | 2018-02-11 20:11:22 +0100 |
|---|---|---|
| committer | Szczepan Zalega <szczepan@nitrokey.com> | 2018-02-12 09:22:44 +0100 |
| commit | c4aaf8e9d3763985bad2025dc88cd80e6b26af80 (patch) | |
| tree | 23b068c9655d1d54247365eef2beca4e27f32b1a /LICENSE | |
| parent | e2e009d7d55b75da4537b1fbecb6759c0aabb63c (diff) | |
| download | libnitrokey-c4aaf8e9d3763985bad2025dc88cd80e6b26af80.tar.gz libnitrokey-c4aaf8e9d3763985bad2025dc88cd80e6b26af80.tar.bz2 | |
Null-terminate string before calling strtoul
hex_string_to_byte in misc.cc calls strtoul with a non-null-terminated
string, causing a buffer over-read. This patch extends the buffer to
always include a null character in the end.
Fixes issue #95.
Diffstat (limited to 'LICENSE')
0 files changed, 0 insertions, 0 deletions