From b1d96e320b51e1610c712f4fdae4a03bbeb52319 Mon Sep 17 00:00:00 2001 From: npt-1707 Date: Fri, 23 Jan 2026 17:31:03 +0800 Subject: [PATCH] xcrypt.c: fix CVE-2012-2143 --- xcrypt.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/xcrypt.c b/xcrypt.c index bbf5d76..d064e49 100644 --- a/xcrypt.c +++ b/xcrypt.c @@ -608,7 +608,8 @@ xcrypt(const char *key, const char *setting) */ q = (unsigned char *) keybuf; while ((q - (unsigned char *) keybuf) < sizeof(keybuf)) { - if ((*q++ = *key << 1)) + *q++ = *key << 1; + if (*key) key++; } if (des_setkey((const char *) keybuf))