]> git.tuebingen.mpg.de Git - paraslash.git/commit
client: Check buffer size returned by apc_priv_decrypt().
authorAndre Noll <maan@tuebingen.mpg.de>
Sun, 7 May 2023 14:40:26 +0000 (16:40 +0200)
committerAndre Noll <maan@tuebingen.mpg.de>
Thu, 16 May 2024 23:36:54 +0000 (01:36 +0200)
commit69c9739b6d9b8f8ec1a9afdd18fa74d386c7ef74
tree20fda83f5393b5400c11c688f9a8b6ed9e1648a9
parentce90164c8b761e17e55a186c8b021ecb55b8fdb5
client: Check buffer size returned by apc_priv_decrypt().

The decoded challenge buffer contains the challenge and the two session
keys but nothing else. So we know its size up-front and should fail
the handshake if the size of the rsa-decrypted buffer differs.
client_common.c