BBS: TELESC.NET.BR Assunto: src/hash/sha256.c De: Rob Swindell (on Debian Linux) Data: Tue, 5 May 2026 15:55:25 -0700 ----------------------------------------------------------- https://gitlab.synchro.net/main/sbbs/-/commit/f2e7d0427a6cdaa762b19c26 Modified Files: src/hash/sha256.c Log Message: SHA256Final: skip zero-length pad memset at block boundary (CID 645972) When the 0x80 terminator lands on the last byte of the block, buf_off advances to SHA256_BLOCK_SIZE and the subsequent memset is called as memset(buffer + 64, 0, 0). The size-zero call is harmless, but forming a one-past-the-end pointer trips Coverity's OVERRUN checker. Guard the memset on buf_off < SHA256_BLOCK_SIZE; behavior is unchanged. n --- mSynchronetn hgVertrauen n hHome of Synchronet n gh[vert/cvs/bbs].synchro.net ----------------------------------------------------------- [Voltar]