[git] GCRYPT - branch, master, updated. libgcrypt-1.8.1-97-g149ceb3

[by Werner Koch]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "The GNU crypto library".

The branch, master has been updated
       via  149ceb3cae03d0385341d32430aa5ae57de90007 (commit)
      from  0e071372fc0e6fed4a449955ed0789803ba5e709 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 149ceb3cae03d0385341d32430aa5ae57de90007
Author: Werner Koch <wk at gnupg.org>
Date:   Wed Oct 24 09:50:17 2018 +0200

    ecc: Fix possible memory leakage in parameter check of eddsa.
    
    * cipher/ecc-eddsa.c (_gcry_ecc_eddsa_verify): Fix mem leak.
    --
    
    GnuPG-bug-id: 4209
    Signed-off-by: Werner Koch <wk at gnupg.org>

diff --git a/cipher/ecc-eddsa.c b/cipher/ecc-eddsa.c
index 813e030..89b708a 100644
--- a/cipher/ecc-eddsa.c
+++ b/cipher/ecc-eddsa.c
@@ -760,7 +760,10 @@ _gcry_ecc_eddsa_verify (gcry_mpi_t input, ECC_public_key *pkey,
                                      pkey->E.p, pkey->E.a, pkey->E.b);
   b = ctx->nbits/8;
   if (b != 256/8)
-    return GPG_ERR_INTERNAL; /* We only support 256 bit. */
+    {
+      rc = GPG_ERR_INTERNAL; /* We only support 256 bit. */
+      goto leave;
+    }
 
   /* Decode and check the public key.  */
   rc = _gcry_ecc_eddsa_decodepoint (pk, ctx, &Q, &encpk, &encpklen);

-----------------------------------------------------------------------

Summary of changes:
 cipher/ecc-eddsa.c | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)


hooks/post-receive
-- 
The GNU crypto library
http://git.gnupg.org


_______________________________________________
Gnupg-commits mailing list
Gnupg-commits at gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-commits