]> git.ipfire.org Git - thirdparty/cups.git/commit
scheduler/cert.c: Fix string comparison (fixes CVE-2022-26691)
authorZdenek Dohnal <zdohnal@redhat.com>
Thu, 26 May 2022 04:27:04 +0000 (06:27 +0200)
committerZdenek Dohnal <zdohnal@redhat.com>
Thu, 26 May 2022 04:27:04 +0000 (06:27 +0200)
commitde4f8c196106033e4c372dce3e91b9d42b0b9444
tree032636dc59df362ebbb5ef3cd1a14b3a08cb130d
parent498fd9f580a514a6e4fa3b469cbdf5bb38d4d625
scheduler/cert.c: Fix string comparison (fixes CVE-2022-26691)

The previous algorithm didn't expect the strings can have a different
length, so one string can be a substring of the other and such substring
was reported as equal to the longer string.
CHANGES.md
scheduler/cert.c