Re: [Sks-devel] another bounds problem in SKS

[Matthew Wilcox]

On Wed, Sep 29, 2004 at 10:58:00PM -0400, David Shaw wrote:
> Packets that need to have this sanity checking are the public key
> packets, public subkey packets, and signatures.  Basically, anything
> with MPIs in it.

Is this the same problem?

 :signature packet: algo 17, keyid A19A031BBF39BA3D
        version 4, created 1090858419, md5len 0, sigclass 10
-       digest algo 2, gpg: buffer shorter than attribute subpacket
-begin of digest 73 51
+       digest algo 2, begin of digest 73 51
        hashed subpkt 2 len 4 (sig created 2004-07-26)
        subpkt 16 len 8 (issuer key ID A19A031BBF39BA3D)
        data: [160 bits]

(this is a diff -u of the output of gpg -vv --recv-keys BCE09436; the -
from an SKS server, the + from keyserver.kjsl.com)

-- 
"Next the statesmen will invent cheap lies, putting the blame upon 
the nation that is attacked, and every man will be glad of those
conscience-soothing falsities, and will diligently study them, and refuse
to examine any refutations of them; and thus he will by and by convince 
himself that the war is just, and will thank God for the better sleep 
he enjoys after this process of grotesque self-deception." -- Mark Twain