Page MenuHome GnuPG
Create Task
Maniphest T977

gcry_mpi_powm double free
Closed, ResolvedPublic
Actions

Description

gcry_mpi_powm(res,base,exp,mod) does not correctly handle the situation when any
of (base,exp,mod) refers to the same underlying MPI structure as res. This sets
it apart from all the other MPI calculation functions. The attached file
demonstrates the bug.

Details

Version
1.4.1

Event Timeline

haakonringberg added projects: libgcrypt, Bug Report.Nov 30 2008, 4:41 PM
haakonringberg set Version to 1.4.1.
haakonringberg added a subscriber: haakonringberg.

193_bug.c654 BDownload

• werner added a subscriber: • werner.Dec 2 2008, 1:05 PM

Fixed in svn revision 1364. Will go into 1.4.4. If you want to test it, grab
http://cvs.gnupg.org/cgi-bin/viewcvs.cgi/*checkout*/trunk/mpi/mpi-pow.c?rev=1364&root=Libgcrypt

• werner added a project: Restricted Project.Dec 2 2008, 1:05 PM
• werner added a comment.Dec 3 2008, 9:05 AM

Another fix was needed, please use revision 1365.

• werner closed this task as Resolved.Jun 17 2009, 4:15 PM
• werner claimed this task.
• werner removed a project: Restricted Project.