[git] GCRYPT - branch, master, updated. libgcrypt-1.8.1-97-g149ceb3

[email protected] (by Werner Koch)
Newsgroups gmane.comp.encryption.gpg.cvs
Message-ID <[email protected]>
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "The GNU crypto library".

The branch, master has been updated
       via  149ceb3cae03d0385341d32430aa5ae57de90007 (commit)
      from  0e071372fc0e6fed4a449955ed0789803ba5e709 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 149ceb3cae03d0385341d32430aa5ae57de90007
Author: Werner Koch <[email protected]>
Date:   Wed Oct 24 09:50:17 2018 +0200

    ecc: Fix possible memory leakage in parameter check of eddsa.
    
    * cipher/ecc-eddsa.c (_gcry_ecc_eddsa_verify): Fix mem leak.
    --
    
    GnuPG-bug-id: 4209
    Signed-off-by: Werner Koch <[email protected]>

diff --git a/cipher/ecc-eddsa.c b/cipher/ecc-eddsa.c
index 813e030..89b708a 100644
--- a/cipher/ecc-eddsa.c
+++ b/cipher/ecc-eddsa.c
@@ -760,7 +760,10 @@ _gcry_ecc_eddsa_verify (gcry_mpi_t input, ECC_public_key *pkey,
                                      pkey->E.p, pkey->E.a, pkey->E.b);
   b = ctx->nbits/8;
   if (b != 256/8)
-    return GPG_ERR_INTERNAL; /* We only support 256 bit. */
+    {
+      rc = GPG_ERR_INTERNAL; /* We only support 256 bit. */
+      goto leave;
+    }
 
   /* Decode and check the public key.  */
   rc = _gcry_ecc_eddsa_decodepoint (pk, ctx, &Q, &encpk, &encpklen);

-----------------------------------------------------------------------

Summary of changes:
 cipher/ecc-eddsa.c | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)


hooks/post-receive
-- 
The GNU crypto library
http://git.gnupg.org
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.