shithub: riscv

Info  •  Files  •  Log  •  Branches

libsec: make sure Elem is zero initialized so freevalfields() wont cause accidents

--- a/sys/src/libsec/port/x509.c

+++ b/sys/src/libsec/port/x509.c

@@ -2213,6 +2213,7 @@

 	char *err;

 	el = nil;

+	memset(&e, 0, sizeof(e));

 	buflen = pkcs1decryptsignature(sig, siglen, pk, &buf);

 	if(buflen < 0 || decode(buf, buflen, &e) != ASN_OK || !is_seq(&e, &el) || elistlen(el) != 2 ||

 			!is_octetstring(&el->tl->hd, &digest)) {