search

dyne / tomb

the Crypto Undertaker
https://dyne.org/software/tomb
GNU General Public License v3.0
1.32k stars 151 forks source link

File tomb, function lock_tomb_with_key(): Wrong comparison operator used to check a tomb's size #489

Closed 68420948 closed 11 months ago

68420948 commented 11 months ago

The operator < compares two strings lexicographically resulting in that a 100MB tomb is considered smaller than 47MB or 18MB.

Please consider this patch from Debian to fix the issue: https://salsa.debian.org/pkg-security-team/tomb/-/blob/debian/master/debian/patches/comparison-operator.patch