Browse Source

fix wrong memcmp() usage in CKey::operator==

- add a check for CKey::size() of a and b (size can be 0 or 32)
- change the fixed value in memcmp() to use a.size() instead
- fixes #3090
0.10
Philip Kaufmann 11 years ago
parent
commit
a39967401e
  1. 7
      src/key.h

7
src/key.h

@ -205,7 +205,8 @@ public:
} }
friend bool operator==(const CKey &a, const CKey &b) { friend bool operator==(const CKey &a, const CKey &b) {
return a.fCompressed == b.fCompressed && memcmp(&a.vch[0], &b.vch[0], 32); return a.fCompressed == b.fCompressed && a.size() == b.size() &&
memcmp(&a.vch[0], &b.vch[0], a.size()) == 0;
} }
// Initialize using begin and end iterators to byte data. // Initialize using begin and end iterators to byte data.
@ -261,9 +262,9 @@ public:
// Derive BIP32 child key. // Derive BIP32 child key.
bool Derive(CKey& keyChild, unsigned char ccChild[32], unsigned int nChild, const unsigned char cc[32]) const; bool Derive(CKey& keyChild, unsigned char ccChild[32], unsigned int nChild, const unsigned char cc[32]) const;
// Load private key and check that public key matches. // Load private key and check that public key matches.
bool Load(CPrivKey &privkey, CPubKey &vchPubKey, bool fSkipCheck); bool Load(CPrivKey &privkey, CPubKey &vchPubKey, bool fSkipCheck);
}; };
struct CExtPubKey { struct CExtPubKey {

Loading…
Cancel
Save