From 9f24078452d53b859d15e032b3aa88f244da8ecd Mon Sep 17 00:00:00 2001 From: Nick Mathewson Date: Sun, 5 Jun 2005 14:28:47 +0000 Subject: [PATCH] Fix buffer overlow when checking hashed passwords svn:r4308 --- src/or/control.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/or/control.c b/src/or/control.c index 564bb1b396..80ad6a33b3 100644 --- a/src/or/control.c +++ b/src/or/control.c @@ -481,7 +481,7 @@ decode_hashed_password(char *buf, const char *hashed) } } if (buf) - memcpy(buf, decoded, sizeof(decoded)); + memcpy(buf, decoded, S2K_SPECIFIER_LEN+DIGEST_LEN); return 0; }