From 1641ae9fd2ed9bee616396a410c6e5cf65253064 Mon Sep 17 00:00:00 2001
From: Andre Noll <maan@systemlinux.org>
Date: Wed, 18 Feb 2015 16:40:40 +0100
Subject: [PATCH] gcrypt: Initialize key size of public ASN keys.
This bug could make applications acccept short keys. Not a serious
problem since (a) ASN keys are deprecated in favor of ssh keys and
(b) encrypting a 256 byte buffer fails anyways on short keys. Let's
fix it anyway.
---
gcrypt.c | 1 +
1 file changed, 1 insertion(+)
diff --git a/gcrypt.c b/gcrypt.c
index b4718ec0..6bb7452c 100644
--- a/gcrypt.c
+++ b/gcrypt.c
@@ -583,6 +583,7 @@ static int get_asn_public_key(const char *key_file, struct asymmetric_key **resu
}
key = para_malloc(sizeof(*key));
key->sexp = sexp;
+ key->num_bytes = n_size;
*result = key;
ret = n_size;
PARA_INFO_LOG("successfully read %u bit asn public key\n", n_size * 8);
--
2.39.5