Opened 5 weeks ago

Closed 4 weeks ago

#2797 closed defect (fixed)

ElGamalAESEngine: Improper use of cache

Reported by: jogger Owned by: zzz
Priority: minor Milestone: 0.9.49
Component: api/crypto Version: 0.9.48
Keywords: Cc:
Parent Tickets: Sensitive: no

Description

There is use-after-free of preIV in decryptExistingSession().

Subtickets

Change History (2)

comment:1 Changed 4 weeks ago by zzz

Milestone: undecided → 0.9.49
Owner: set to zzz
Status: new → accepted

comment:2 Changed 4 weeks ago by zzz

Component: router/general → api/crypto
Resolution: → fixed
Status: accepted → closed

Good catch, thanks
In 20b413bc67f5298c7b7a36cc3499401f38764740 to be 0.9.48-6

Note: See TracTickets for help on using tickets.