Bladeren bron

Bug 1729: Security fixes from PuTTY 0.71 - vuln-rng-reuse

https://winscp.net/tracker/1729
https://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-rng-reuse.html

Source commit: f68057d9c4a21ee7f3e065993b9bd48cf226190e
Martin Prikryl 6 jaren geleden
bovenliggende
commit
8b0202f6b2
1 gewijzigde bestanden met toevoegingen van 2 en 0 verwijderingen
  1. 2 0
      source/putty/sshrand.c

+ 2 - 0
source/putty/sshrand.c

@@ -240,6 +240,8 @@ void random_add_noise(void *noise, int length)
 	length -= HASHINPUT - pool.incomingpos;
 	SHATransform((word32 *) pool.incoming, (word32 *) pool.incomingb);
 	for (i = 0; i < HASHSIZE; i++) {
+	    if (pool.poolpos >= POOLSIZE)
+		pool.poolpos = 0;
 	    pool.pool[pool.poolpos++] ^= pool.incoming[i];
 	    if (pool.poolpos >= POOLSIZE)
 		pool.poolpos = 0;