diff options
| author |   schwarze <schwarze@openbsd.org> | 2015-01-01 19:28:29 +0000 |
|---|---|---|
| committer | schwarze <schwarze@openbsd.org> | 2015-01-01 19:28:29 +0000 |
| commit | 1a5d26ae4bbfe5c0d2618b1acac1d61d58e451f4 (patch) | |
| tree | 418097e710039c41e0eddbd87a86ec0f2311cbaa /lib/libtls | |
| parent | Fix a read buffer overrun triggered by trailing \s- or trailing \s+ (diff) | |
| download | wireguard-openbsd-1a5d26ae4bbfe5c0d2618b1acac1d61d58e451f4.tar.xz wireguard-openbsd-1a5d26ae4bbfe5c0d2618b1acac1d61d58e451f4.zip | |
Fix a buffer overrun triggered by a trailing backslash at EOF in
an unclosed conditional body. If the memory contained the byte
sequence "\}" after the end of the buffer before the next NUL, this
could even write beyond the end of the buffer, specifically '&' to
the location of the '}'. Found by jsg@ with afl.
Diffstat (limited to 'lib/libtls')
0 files changed, 0 insertions, 0 deletions