BUG: Signing and encrypting a single space in textmode is broken

David Shaw dshaw at jabberwocky.com
Tue Apr 23 05:53:01 CEST 2002


On Sat, Apr 20, 2002 at 09:32:27PM +0200, Ingo Klöcker wrote:
> [Please cc me as I'm not subscribed to gnupg-devel.]
> 
> Hi,
> 
> a KMail user tried to send himself a signed and encrypted message which 
> only contains a single space. After decrypting the received message it 
> contained some garbage characters and was not signed.

Very interesting bug.  GnuPG was making a good signature, but the
verification side was not correctly handling the zero-length data for
the signature.  The binary garbage you found in the received message
was actually the signature itself.

This is fixed now.

David

-- 
   David Shaw  |  dshaw at jabberwocky.com  |  WWW http://www.jabberwocky.com/
+---------------------------------------------------------------------------+
   "There are two major products that come out of Berkeley: LSD and UNIX.
      We don't believe this to be a coincidence." - Jeremy S. Anderson




More information about the Gnupg-devel mailing list