folkslinux
/
rpm
mirror of https://github.com/rpm-software-management/rpm.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Prevent buffer overflow in readKeys()

This commit is contained in:
Jindrich Novy 2008-04-14 13:07:58 +02:00
parent 641046e4da
commit 2c2d98a08d
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
rpmio/thkp.c
View File

@ -44,7 +44,7 @@ static int readKeys(const char * uri)
const uint8_t * pkt;
size_t pktlen;
uint8_t keyid[8];
char fn[BUFSIZ];
char *fn = NULL;
pgpDig dig;
int rc;
int ec = 0;
@ -54,11 +54,12 @@ static int readKeys(const char * uri)
for (kip = keyids; *kip; kip += 2) {
pgpArmor pa;
sprintf(fn, "%s/pks/lookup?op=get&search=0x%08x%08x", uri, kip[0], kip[1]);
rasprintf(&fn, "%s/pks/lookup?op=get&search=0x%08x%08x", uri, kip[0], kip[1]);
fprintf(stderr, "======================= %s\n", fn);
pkt = NULL;
pktlen = 0;
pa = pgpReadPkts(fn, &pkt, &pktlen);
free(fn);
if (pa == PGPARMOR_ERROR || pa == PGPARMOR_NONE
|| pkt == NULL || pktlen <= 0)
{