Yubico / yubikey-personalization / 510

38%

master: 39%

Pull #142

travis-ci

Tighten the salt_len check to avoid a potential stack buf overwrite further down.

If salt_len was 256:

 for (block_count = 1; block_count <= l; block_count++) {
                unsigned char block[256]; /* A big chunk, that's 2048 bits */
[ ... ]

                memcpy(block, salt, salt_len);
                block[salt_len + 0] = (block_count & 0xff000000) >> 24;
                block[salt_len + 1] = (block_count & 0x00ff0000) >> 16;
                block[salt_len + 2] = (block_count & 0x0000ff00) >>  8;
                block[salt_len + 3] = (block_count & 0x000000ff) >>  0;

        block[256] is outside the buffer and then the next lines would overwrite 3 more bytes

1 of 1 new or added line in 1 file covered. (100.0%)

580 of 1518 relevant lines covered (38.21%)

396.93 hits per line