← Back to branch summary

~ubuntu-branches/debian/squeeze/ntp/squeeze-201010051545

« back to all changes in this revision

Viewing changes to libntp/lib_strbuf.h

  • Committer: Bazaar Package Importer
  • Author(s): Kurt Roeckx
  • Date: 2009-01-05 21:10:03 UTC
  • mfrom: (1.2.4 upstream)
  • Revision ID: james.westby@ubuntu.com-20090105211003-mh6zc3um4k1uhsj7
Tags: 1:4.2.4p4+dfsg-8
It did not properly check the return value of EVP_VerifyFinal
which results in an malformed DSA signature being treated as
a good signature rather than as an error.  (CVE-2009-0021)

Show diffs side-by-side

added added

removed removed

Lines of Context:
libntp/lib_strbuf.h
7
7
/*
8
8
 * Sizes of things
9
9
 */
10
 
#define LIB_NUMBUFS     20
 
10
#define LIB_NUMBUFS     200
11
11
#define LIB_BUFLENGTH   80
12
12
 
13
13
/*
20
20
                buf = &lib_stringbuf[lib_nextbuf][0]; \
21
21
                if (++lib_nextbuf >= LIB_NUMBUFS) \
22
22
                        lib_nextbuf = 0; \
 
23
                memset(buf, 0, LIB_BUFLENGTH); \
23
24
        } while (0)
24
25
 
25
26
extern char lib_stringbuf[LIB_NUMBUFS][LIB_BUFLENGTH];