nhyatt/putty-source
1
0
Fork 0
mirror of https://git.tartarus.org/simon/putty.git synced 2025-04-09 15:18:06 -05:00
Code Issues Projects Releases Wiki Activity

Add another missing bounds check in the SSH-1 private key loader.

Browse Source 
[originally from svn r9904]
This commit is contained in:
Simon Tatham 2013-07-11 17:24:01 +00:00
parent bc2076185e
commit 1dbdd2c43f
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
sshpubk.c
View File

@ -74,7 +74,7 @@ static int loadrsakey_main(FILE * fp, struct RSAKey *key, int pub_only,
/* Next, the comment field. */
j = GET_32BIT(buf + i);
i += 4;
if (len - i < j)
if (j < 0 || len - i < j)
goto end;
comment = snewn(j + 1, char);
if (comment) {