Comments (4)
@moschlar Re-reviewing the code with #38 in mind, the possible problem points I see are:
- Applying a 32-bit value to a byte buffer (including some pointer arithmetic)
Line 17 in b122181
- More pointer arithmetic (via function calls)
Line 91 in b122181
- More direct pointer arithmetic while appending successive digests
Line 153 in b122181
As with last time, we don't have a big-endian environment to troubleshoot and test on, so any assistance with or access to such an environment would be valuable.
from cjose.
- Applying a 32-bit value to a byte buffer (including some pointer arithmetic)
Ah yes, it seems to be called with value
of anything but uint32_t
:
I'll see if I can somehow access such an environment to test it (cc @christmart).
Could you maybe think of a simple way to fix these three occurences?
from cjose.
(finally returning from holiday ... )
Thanks @moschlar.
The protocol expects a uint32_t
, but just about all the calls around it expect a size_t
. I'll change the int
to uint32_t
(it is just a counter that can't be negative). For the others I'll make an explicit cast.
from cjose.
The Debian architecture builds are now working, too! :-)
from cjose.
Related Issues (20)
- Unusual IV for AES_CBC HOT 2
- is this repo alive and maintained? HOT 1
- Failed to build 32 bit cjose
- Add support for ES256K
- Maintenance status of this project
- Is it supported input the AAD when call cjose_jwe_encrypt function?
- struct _key_fntable_int incompatible with memory leak detectors HOT 3
- memory allocation error HOT 1
- Visual C++ source incompatibility HOT 3
- Can cjose be installed successfully on solaris 11.3?
- RSA PEM format HOT 1
- Does support "alg": "RSA-OAEP-256"?
- CPU usage for routine cjose_jws_verify HOT 1
- Support building with OpenSSL 3.0 HOT 4
- external maintenance fork 0.6.2.x HOT 1
- Does the project support RSA-OAEP-256 algorithm?
- The asserts in base64.c can crash the application using the lib
- SECURITY VULNERABILITY: incorrect Authentication Tag length usage in AES GCM decryption HOT 1
- machine ... not recognized with --with-jansson HOT 1
- clang-format status
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from cjose.