From ad2ef761986e500fc7e657413ae3e09f791d855e Mon Sep 17 00:00:00 2001 From: Hanno Date: Wed, 1 Mar 2017 20:28:35 +0100 Subject: Fix one byte buffer overflow in ListPossibleChars(). The array PossChars, part of DictWork_t, needs to be one byte larger to hold the trailing zero byte. --- zxcvbn.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/zxcvbn.c b/zxcvbn.c index f9678c5..2e15680 100644 --- a/zxcvbn.c +++ b/zxcvbn.c @@ -493,7 +493,7 @@ typedef struct uint8_t LeetCnv[sizeof L33TCnv / LEET_NORM_MAP_SIZE + 1]; /* uint8_t LeetChr[3]; */ uint8_t First; - uint8_t PossChars[48]; + uint8_t PossChars[49]; } DictWork_t; /********************************************************************************** -- cgit v1.2.3