[GNUnet-SVN] r14185 - GNUnet/src/applications/identity

[gnunet]

Author: grothoff
Date: 2011-01-15 23:25:07 +0100 (Sat, 15 Jan 2011)
New Revision: 14185

Modified:
   GNUnet/src/applications/identity/identity.c
Log:
From: 
Stanislav Ochotnicky <address@hidden>
  To: 
address@hidden
  Date: 
Today 09:51:36 pm
   
Not enough information to check signature validity.  Show Details
  Attached patch should fix bug mentioned in [1]. memset function was used
incorrectly with address of a pointer instead of address where pointer
was pointing thus causing buffer overflow and possibly other problems.

The 0.9.x versions don't seem to be affected since the identity
application doesn't exist there if I am not mistaken.

[1] https://bugs.gentoo.org/show_bug.cgi?id=339355

-- 
Stanislav Ochotnicky


Modified: GNUnet/src/applications/identity/identity.c
===================================================================
--- GNUnet/src/applications/identity/identity.c 2011-01-15 13:47:08 UTC (rev 
14184)
+++ GNUnet/src/applications/identity/identity.c 2011-01-15 22:25:07 UTC (rev 
14185)
@@ -423,7 +423,7 @@
                  GNUNET_PeerIdentity * result)
 {
   if (pubKey == NULL)
-    memset (&result, 0, sizeof (GNUNET_PeerIdentity));
+    memset (result, 0, sizeof (GNUNET_PeerIdentity));
   else
     GNUNET_hash (pubKey, sizeof (GNUNET_RSA_PublicKey), &result->hashPubKey);
 }