]> asedeno.scripts.mit.edu Git - PuTTY.git/commit
projects / PuTTY.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: f69b371) | patch
Another ecdsa_newkey crash: initialise ec->privateKey earlier.
authorBen Harris <bjh21@bjh21.me.uk>
Fri, 9 Oct 2015 23:20:51 +0000 (00:20 +0100)
committerBen Harris <bjh21@bjh21.me.uk>
Wed, 28 Oct 2015 22:08:32 +0000 (22:08 +0000)
commit63b47ed9d504b37ac2e903715ae7bf40036473a1
tree131d13db2912e91dabb3a26fbc9bc53e9ef37624tree | snapshot
parentf69b371bcd476a084639cddfb5cddfd3765413bccommit | diff
Another ecdsa_newkey crash: initialise ec->privateKey earlier.

This one might be exploitable, since without the fix, ecdsa_freekey()
tries to wipe the bignum pointed to by an uninitialised pointer.

Bug found with the help of afl-fuzz.
sshecc.c diff | blob | history
local copy of git://git.tartarus.org/simon/putty.git