Mailing List Archive

Re: same linux, now suid
Pretty standard bug in g10/keygen.c

diff -u -r1.23 keygen.c
--- keygen.c 1998/02/24 18:50:19 1.23
+++ keygen.c 1998/02/25 07:38:19
@@ -502,7 +502,7 @@

tty_printf(_("You need a Passphrase to protect your secret key.\n\n")
);

- dek = m_alloc_secure( sizeof *dek );
+ dek = m_alloc_secure( sizeof *dek + 8 );
salt = (byte*)dek + sizeof *dek;
for(;;) {
dek->algo = CIPHER_ALGO_BLOWFISH;


The keys should be good anyway. I should add a key generation check
soon.

--
Werner

finger gcrypt@ftp.guug.de for GNUPG key
fingerprint = 8489 6CD0 1851 0E33 45DA CD67 036F 11B8 FF3E AA0B