xauth: Changes to 'master'

[GitLab Mirror]

 process.c |    2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

New commits:
commit cb98d3b3c5e0f8a7585ab6e2c909fad68c52fd55
Author: Tobias Stoeckmann <tobias at stoeckmann.org>
Date:   Sun May 3 12:25:21 2020 +0200

    Fix segmentation fault on invalid add argument.
    
    The hex key supplied with an add command can be quoted, in which
    case the quotation marks are removed.
    
    The check itself makes sure that a given string starts with a
    double quotation mark and ends with a double quotation mark.
    
    Buf if only " is supplied, the code crashes because it subtracts
    2 from the length (which is 1) and therefore copies too much
    memory into a 0 allocated memory area.
    
    Proof of concept:
    
    $ xauth add :0 0 \"