https://gitlab.synchro.net/main/sbbs/-/commit/f2e7d0427a6cdaa762b19c26
Modified Files:
src/hash/sha256.c
Log Message:
SHA256Final: skip zero-length pad memset at block boundary (CID 645972)
When the 0x80 terminator lands on the last byte of the block, buf_off
advances to SHA256_BLOCK_SIZE and the subsequent memset is called as memset(buffer + 64, 0, 0). The size-zero call is harmless, but forming
a one-past-the-end pointer trips Coverity's OVERRUN checker. Guard the
memset on buf_off < SHA256_BLOCK_SIZE; behavior is unchanged.
---
þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net