Thread (1 message) 1 message, 1 author, 2021-11-01

Re: [PATCH 2/2] gpg-interface: avoid buffer overrun in parse_ssh_output()

From: Junio C Hamano <hidden>
Date: 2021-11-01 17:45:06

Fabian Stelzer [off-list ref] writes:
On 30.10.21 19:07, René Scharfe wrote:
quoted
If the string "key" we found in the output of ssh-keygen happens to be
located at the very end of the line, then going four characters further
leaves us beyond the end of the string.  Explicitly search for the
space after "key" to handle a missing one gracefully.

Signed-off-by: René Scharfe <redacted>
---
This code was added after v2.33.0.
Thanks. This is obviously correct.
Thanks, both.  Will apply.
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help