View Issue Details

IDProjectCategoryView StatusLast Update
0009950Talerqtartpublic2025-05-13 14:39
Reporterfefe Assigned Toavalos  
PrioritynormalSeverityminorReproducibilityhave not tried
Status assignedResolutionopen 
Product Versiongit (master) 
Summary0009950: unchecked malloc can lead to crash
DescriptionIn tart_module.c:

 510 hash = malloc(hash_len);
 511
 512 if (crypto_pwhash(hash,
 513 hash_len,
 514 (const char*) pw,
 515 pw_len,
 516 salt,
 517 iters,
 518 mem_size * 1024,
 519 crypto_pwhash_ALG_ARGON2ID13) != 0) {

malloc can fail and return NULL, and crypto_pwhash does not check if hash is NULL before writing to it.
TagsNo tags attached.

Activities

There are no notes attached to this issue.

Issue History

Date Modified Username Field Change
2025-05-13 13:51 fefe New Issue
2025-05-13 14:39 Christian Grothoff Assigned To => avalos
2025-05-13 14:39 Christian Grothoff Status new => assigned