~ruther/guix-local

ref: 56daf847a067b806f4e333c8849b387ea30df6e3 guix-local/gnu/packages/patches/libmhash-hmac-fix-uaf.patch -rw-r--r-- 658 bytes
56daf847 — Christopher Baines gnu: nar-herder: Update to 0-44.3794b25. 5 months ago
                                                                                
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
--- mhash-0.9.9.9/src/hmac_test.c	2020-08-20 14:53:06.628995733 -0500
+++ mhash-0.9.9.9/src/hmac_test.c	2020-08-20 14:53:39.424885862 -0500
@@ -72,8 +72,6 @@
 		return(MUTILS_INVALID_RESULT);
 	}
 
-	mutils_free(tmp);
-
 	/* Test No 2 */	
 	
 	mutils_memset(tmp, 0, sizeof(tmp));
--- mhash-0.9.9.9/src/keygen_test.c	2020-08-20 14:53:12.940974589 -0500
+++ mhash-0.9.9.9/src/keygen_test.c	2020-08-20 14:53:59.736817812 -0500
@@ -94,8 +94,6 @@
 		return(MUTILS_INVALID_RESULT);
 	}
 
-	mutils_free(tmp);
-
 	passlen = sizeof(PASSWORD2);
 	password = (mutils_word8 *) mutils_malloc(passlen + 1);
 	mutils_strncpy(password, (mutils_word8 *) PASSWORD2, passlen);