[patch] fix out of bounds in skey

skey-fix-oob.diff (text/plain), 473 bytes, created by Hanno Böck on 2015-12-05 22:31:19 UTC

--- aa/put.c	2015-12-05 23:25:16.859293288 +0100
+++ skey-1.1.5/put.c	2015-12-05 23:25:30.513292266 +0100
@@ -2081,10 +2081,13 @@
  */
 char *btoe(char *engout, const char *c)
 {
-	char cp[9];	/* add in room for the parity 2 bits */
+	char cp[10];	/* add in room for the parity 2 bits + extract() slop */
 	int p, i;
 
 	engout[0] = '\0';
+
+	/* workaround for extract() reads beyond end of data */
+	memset(cp, 0, sizeof(cp));
 	memcpy(cp, c, 8);
 
 	/* compute parity */