Daiki Ueno commented: 
https://gitlab.com/gnutls/gnutls/-/issues/1777#note_2970510306


I suspect that you are getting "Encoding error" because the program just reads 
past the boundary? I'd suggest using valgrind or compile the program with 
`CFLAGS="-O2 -D_FORTIFY_SOURCE=2"` instead of using gdb.

Some might consider this as a security issue, though I'd say it's very low 
severity: 
[CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L](https://www.first.org/cvss/calculator/3-1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L),
 given that SRP support is disabled by default since 3.8.0 and srptool is not 
even part of major distributions.

-- 
Reply to this email directly or view it on GitLab: 
https://gitlab.com/gnutls/gnutls/-/issues/1777#note_2970510306
You're receiving this email because of your account on gitlab.com.


_______________________________________________
Gnutls-devel mailing list
[email protected]
http://lists.gnupg.org/mailman/listinfo/gnutls-devel
  • [gnutls-de... Read-only notification of GnuTLS library development activities
    • Re: [... Read-only notification of GnuTLS library development activities
    • Re: [... Read-only notification of GnuTLS library development activities
    • Re: [... Read-only notification of GnuTLS library development activities
    • Re: [... Read-only notification of GnuTLS library development activities
    • Re: [... Read-only notification of GnuTLS library development activities
    • Re: [... Read-only notification of GnuTLS library development activities

Reply via email to