From: root <devnull@localhost>
Date: Wed, 21 Feb 1996 22:20:37 +0000 (+0000)
Subject: check for bad read in readSignature()
X-Git-Tag: rpm-4.4-release~5351
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=d90c22d3e9706f53003130539835aa4d2ffc61e4;p=platform%2Fupstream%2Frpm.git

check for bad read in readSignature()

CVS patchset: 384
CVS date: 1996/02/21 22:20:37
---

diff --git a/lib/signature.c b/lib/signature.c
index be62737..2f7ec5e 100644
--- a/lib/signature.c
+++ b/lib/signature.c
@@ -34,7 +34,9 @@ int readSignature(int fd, short sig_type, void **sig)
 	}
 	break;
     case RPMSIG_PGP262_1024:
-	read(fd, pgpbuf, 256);
+	if (read(fd, pgpbuf, 256) != 256) {
+	   return 0;
+	}
 	if (sig) {
 	    *sig = malloc(152);
 	    memcpy(*sig, pgpbuf, 152);