xauth: Changes to 'master'

[GitLab Mirror]

 process.c |    4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

New commits:
commit a5c70489f99c8259d4770aeb96524a91395b8ab9
Author: Alan Coopersmith <alan.coopersmith at oracle.com>
Date:   Sun Apr 10 10:46:51 2022 -0700

    Fix off-by-one in quote-stripping routines
    
    Reported by Oracle Parfait:
    
    Error: Buffer overrun
       Buffer overflow [buffer-overflow] (CWE 120):
          In pointer dereference of key[(len - 1)] with index (len - 1)
          Array size >= 1 bytes, index >= 1
            at line 1647 of process.c in function 'do_add'.
    
    Error: Buffer overrun
       Buffer overflow [buffer-overflow] (CWE 120):
          In pointer dereference of authdata[(authdatalen - 1)] with index (authdatalen - 1)
          Array size is ??? bytes, index is ???
            at line 1965 of process.c in function 'do_generate'.
    
    Signed-off-by: Alan Coopersmith <alan.coopersmith at oracle.com>