zhaojh329 / libuwsc

A Lightweight and fully asynchronous WebSocket client library based on libev
MIT License
289 stars 53 forks source link

sha1_transform() causes buffer overflow #33

Open clearday4 opened 3 years ago

clearday4 commented 3 years ago

Hello. sha1_transform() in the sha1.c declares a block[1] of union type, which is union char64long16 { uint8_t c[64]; uint32_t l[16]; };

and access until block->l[79] by R0 MACRO. It makes a buffer overflow. would you fix this problem?