wt/finit
1
0
Fork 0
mirror of https://github.com/troglobit/finit.git synced 2026-10-03 22:43:08 +07:00
Code Issues Packages Projects Releases Wiki Activity

plugins: use byte addressing of rand_pool_info data buffer

Browse Source 
Fix out-of-bounds write in urandom plugin.

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
This commit is contained in:
Joachim Wiberg
2025-04-07 12:52:16 +02:00
parent c67d15e272
commit 3feff37ba5
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
plugins/urandom.c
+3 -1
View File
@@ -78,6 +78,7 @@ static void setup(void *arg)
{
#ifdef RANDOMSEED
struct rand_pool_info *rpi;
unsigned char *rpi_buf;
ssize_t len = 0;
struct stat st;
int rc = -1;
@@ -137,10 +138,11 @@ static void setup(void *arg)
goto fallback;
}
rpi_buf = (unsigned char *)rpi->buf;
do {
ssize_t num;
num = read(fd, &rpi->buf[len], RANDOM_BYTES - len);
num = read(fd, &rpi_buf[len], RANDOM_BYTES - len);
if (num <= 0) {
if (num == -1 && errno == EINTR)
continue;