From 1641ae9fd2ed9bee616396a410c6e5cf65253064 Mon Sep 17 00:00:00 2001 From: Andre Noll Date: Wed, 18 Feb 2015 16:40:40 +0100 Subject: [PATCH] gcrypt: Initialize key size of public ASN keys. This bug could make applications acccept short keys. Not a serious problem since (a) ASN keys are deprecated in favor of ssh keys and (b) encrypting a 256 byte buffer fails anyways on short keys. Let's fix it anyway. --- gcrypt.c | 1 + 1 file changed, 1 insertion(+) diff --git a/gcrypt.c b/gcrypt.c index b4718ec0..6bb7452c 100644 --- a/gcrypt.c +++ b/gcrypt.c @@ -583,6 +583,7 @@ static int get_asn_public_key(const char *key_file, struct asymmetric_key **resu } key = para_malloc(sizeof(*key)); key->sexp = sexp; + key->num_bytes = n_size; *result = key; ret = n_size; PARA_INFO_LOG("successfully read %u bit asn public key\n", n_size * 8); -- 2.39.2