uninitialized data in signUserData

[Scott Neugroschl]

Hi Peter,

When looking through misc/user.c, in function signUserData(), at line
843, the call to envelopeSign uses an unintialized buffer and an
unintialized buffer length as the first two parameters.  Since these
are input parameters to envelopeSign, I'm not sure what the proper
data to go into userInfoBuffer is.

Thanks,

Scott Neugroschl

_______________________________________________
Cryptlib mailing list
Cryptlib@... via Mail: cryptlib-request@...
Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/
http://news.gmane.org/gmane.comp.encryption.cryptlib
Posts from non-subscribed addresses are blocked to prevent spam, please
subscribe in order to post messages.

[Peter Gutmann]

Scott Neugroschl <redfloyd@...> writes:

>When looking through misc/user.c, in function signUserData(), at line 843,
>the call to envelopeSign uses an unintialized buffer and an unintialized
>buffer length as the first two parameters.  Since these are input parameters
>to envelopeSign, I'm not sure what the proper data to go into userInfoBuffer
>is.

Uhh, that code isn't used for anything, it's also documented in the manual as
not being enabled, see p.45.

Peter.

_______________________________________________
Cryptlib mailing list
Cryptlib@... via Mail: cryptlib-request@...
Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/
http://news.gmane.org/gmane.comp.encryption.cryptlib
Posts from non-subscribed addresses are blocked to prevent spam, please
subscribe in order to post messages.