# HG changeset patch # User Matt Johnston # Date 1520522599 -28800 # Node ID 98d2b125eb899689a68658347f99bb983962f12f # Parent bff41a61a1b6008662101955e11486bd222d84dc kexhashbuf was much to small in kex fuzzers diff -r bff41a61a1b6 -r 98d2b125eb89 fuzzer-kexdh.c --- a/fuzzer-kexdh.c Thu Mar 08 23:22:53 2018 +0800 +++ b/fuzzer-kexdh.c Thu Mar 08 23:23:19 2018 +0800 @@ -54,8 +54,7 @@ dropbear_exit("Bad kex value"); } - ses.kexhashbuf = buf_new(4); - buf_putint(ses.kexhashbuf, 12345); + ses.kexhashbuf = buf_new(KEXHASHBUF_MAX_INTS); kexdh_comb_key(dh_param, &dh_e, svr_opts.hostkey); /* kexhashbuf is freed in kexdh_comb_key */ diff -r bff41a61a1b6 -r 98d2b125eb89 fuzzer-kexecdh.c --- a/fuzzer-kexecdh.c Thu Mar 08 23:22:53 2018 +0800 +++ b/fuzzer-kexecdh.c Thu Mar 08 23:23:19 2018 +0800 @@ -60,8 +60,7 @@ buffer * ecdh_qs = buf_getstringbuf(fuzz.input); - ses.kexhashbuf = buf_new(4); - buf_putint(ses.kexhashbuf, 12345); + ses.kexhashbuf = buf_new(KEXHASHBUF_MAX_INTS); kexecdh_comb_key(ecdh_param, ecdh_qs, svr_opts.hostkey); /* kexhashbuf is freed in kexdh_comb_key */