Bug in CSM_Common::UnloadParams and CSM_Common::SMTI_DecryptAES

[email protected] Mon, 13 Aug 2001 09:31:30 -0400
Newsgroups gmane.ietf.sfl
Message-ID <[email protected]> 
Hi,

I think i have found a litle bug in CSM_Common::UnloadParams(CSM_OID
*pPrefContentOid, CSM_Buffer &parameters, int &effectiveKeyBits).

The bug is that the function return NULL if i use AES when i want to
decrypt with CSM_Free3::SMTI_Decrypt(CSM_Buffer *pParameters, CSM_Buffer
*pEncryptedData, CSM_Buffer *pMEK, CSM_Buffer *pData).

The other bug, if it's a bug, is that the first parameter (CSM_Buffer
*pParameters) is never used and the last parameter (CSM_Buffer *pIV) is
never validated (if pIv == NULL do semething).  All this are in
CSM_Common::SMTI_DecryptAES.



**************************************************************************
Eric Boudreault
------------------------------------------------
Programmeur
------------------------------------------------
Motus Technologies
390, St-Vallier Est
Bureau 100
Québec, Qc
G1K 3P6
Tél.: 521-2100  ext.#242
Fax.: 521-2101
courriel: [email protected]
**************************************************************************