← Back to branch summary

~ubuntu-branches/debian/squeeze/ntp/squeeze-201010051545

« back to all changes in this revision

Viewing changes to ntpd/refclock_ripencc.c

  • Committer: Bazaar Package Importer
  • Author(s): Kurt Roeckx
  • Date: 2009-01-05 21:10:03 UTC
  • mfrom: (1.2.4 upstream)
  • Revision ID: james.westby@ubuntu.com-20090105211003-mh6zc3um4k1uhsj7
Tags: 1:4.2.4p4+dfsg-8
It did not properly check the return value of EVP_VerifyFinal
which results in an malformed DSA signature being treated as
a good signature rather than as an error.  (CVE-2009-0021)

Show diffs side-by-side

added added

removed removed

Lines of Context:
ntpd/refclock_ripencc.c
44
44
#include "ntp_unixtime.h"
45
45
#include "ntp_io.h"
46
46
 
47
 
#ifdef HAVE_TIMEPPS_H
48
 
# include <timepps.h>
49
 
#else /* HAVE_TIMEPPS_H */
50
 
# ifdef HAVE_SYS_TIMEPPS_H
51
 
#  include <sys/timepps.h>
52
 
# endif /* HAVE_SYS_TIMEPPS_H */
53
 
#endif /* HAVE_TIMEPPS_H */
 
47
#ifdef HAVE_PPSAPI
 
48
# include "ppsapi_timepps.h"
 
49
#endif
54
50
 
55
51
/*
56
52
 * Definitions