Another pgp parser fix.

CVS patchset: 5713
CVS date: 2002/09/16 23:24:41

diff --git a/rpmio/rpmpgp.c b/rpmio/rpmpgp.c
index 3f301c3..609d8dd 100644 (file)
--- a/rpmio/rpmpgp.c
+++ b/rpmio/rpmpgp.c
@@ -625,6 +625,8 @@ fprintf(stderr, " unhash[%u] -- %s\n", plen, pgpHexStr(p, plen));
 /*@=mods@*/
 
        p += 2;
+       if (p > (h + hlen))
+           return 1;
 
        rc = pgpPrtSigParams(tag, v->pubkey_algo, v->sigtype, p, h, hlen);
     }  break;