View Issue Details

IDProjectCategoryView StatusLast Update
0009951Talerqtartpublic2025-05-13 14:39
Reporterfefe Assigned ToFlorian Dold  
PrioritynormalSeverityminorReproducibilityhave not tried
Status assignedResolutionopen 
Summary0009951: integer overflow in js_talercrypto_hash_argon2id
DescriptionIn tart_module.c:

   518 mem_size * 1024,

mem_size is a uint32, 1024 is an int, so mem_size * 1024 is a uint32. The function expects a size_t, so the truncated result will be promoted to 64-bit.

If mem_size is big enough, an unexpected truncation might happen here (probably not causing too much damage though)
TagsNo tags attached.

Activities

There are no notes attached to this issue.

Issue History

Date Modified Username Field Change
2025-05-13 13:55 fefe New Issue
2025-05-13 14:39 Christian Grothoff Assigned To => Florian Dold
2025-05-13 14:39 Christian Grothoff Status new => assigned