| Subject: | global-buffer-overflow in cpx_crypt_des with undefined salt |
case #64429 0.602: Fix global-buffer-overflow in des.c:681
cpx_crypt_des() with undefined salt may lead to reading from an uninitialized salt[1] character from the stask, which is unused, but leads to -faddress-sanitizer and valgrind warnings.
Testcase 8 in t/02_des.t [ "test1234", undef, "" ]
patch in our private repo.
--
Reini Urban