Skip to content

Fix buffer overflow in pkcs5_pbkdf2_hmac_sha1

Miloslav Trmač requested to merge mitr/m2crypto:pbkdf2-overflow into master

The underlying PKCS5_PBKDF2_HMAC_SHA1 can generate output of any size, so a fixed on-stack buffer is insufficient.

Resolves https://bugzilla.redhat.com/show_bug.cgi?id=1270318 .

Merge request reports