Fwd: patch for chntpw

[David Collett]

Hi Debian and Ubuntu chntpw maintainers,

See below for a small patch which fixes a corruption issue when
editing REG_MULTI_SZ values.
I've sent it to Petter (upstream author) who has accepted it.
I don't believe he has any plans to make a new release soon though, so
you may wish to add it as a debian/patch in the meantime.

Thanks,
Dave



---------- Forwarded message ----------
From: David Collett <david.collett at gmail.com>
Date: 18 June 2012 11:38
Subject: patch for chntpw
To: pnh at pogostick.net


Hi,

Attached is a very small patch to fix a bug with REG_MULTI_SZ editing.
The multi-sz was not correctly null terminated, leading to possible
erroneous extra values.
The original code incorrectly incremented the 'in' variable before
null-terminating the array causing it to skip one byte before
terminating. (Valgrind was able to find this error).
The patch simply switches the order of two lines.

Thanks,
Dave
-------------- next part --------------
A non-text attachment was scrubbed...
Name: chntpw-110511-multi-sz-fix.patch
Type: application/octet-stream
Size: 502 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/ubuntu-motu/attachments/20120619/76f02d3c/attachment.obj>