Package: gnupg2
Version: 2.1.1
Severity: normal

in app-nks.c on line 1242, data is assigned the memory of 'datalen', which is 
calculated using oldpinlen + newpinlen.
The problem is, it doesn't account for the terminating null byte, so it should 
be datalen + 1(or, +2?, will need to check.)

Thanks

-- 
-- Joshua Rogers <https://internot.info/>


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to