CVSROOT: /cvs Module name: src Changes by: mi...@cvs.openbsd.org 2012/06/04 03:14:29
Modified files:
sbin/iked : dh.c
sbin/isakmpd : dh.c
Log message:
Rounding up a number of bytes in a bignum returned by the BN_num_bytes()
has implications when dealing with leading zeroes. Prevent an incorrect
conversion of the EC point to the binary representation by inferring the
X and Y components' lengths from the EC group length and zeroing out the
appropriate chunks of the target buffer. From hshoexer@
