From: Schanzenbach, Martin <mschanzenbach@posteo.de>
Date: Wed, 4 Sep 2019 19:06:34 +0000 (+0200)
Subject: hash fix
X-Git-Tag: v0.11.7~167
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=a03894d17d70a919e707bb2ade569e66037ff111;p=oweals%2Fgnunet.git

hash fix
---

diff --git a/src/reclaim/oidc_helper.c b/src/reclaim/oidc_helper.c
index 40b07a5d0..e686a67a1 100644
--- a/src/reclaim/oidc_helper.c
+++ b/src/reclaim/oidc_helper.c
@@ -54,12 +54,12 @@ struct OIDC_Parameters
   /**
    * The length of the PKCE code_challenge
    */
-  uint16_t code_challenge_len GNUNET_PACKED;
+  uint32_t code_challenge_len GNUNET_PACKED;
 
   /**
    * The length of the attributes list
    */
-  uint16_t attr_list_len GNUNET_PACKED;
+  uint32_t attr_list_len GNUNET_PACKED;
 };
 
 GNUNET_NETWORK_STRUCT_END
@@ -608,7 +608,7 @@ OIDC_parse_authz_code (const struct GNUNET_CRYPTO_EcdsaPrivateKey *ecdsa_priv,
   params = (struct OIDC_Parameters *) plaintext;
 
   // cmp code_challenge code_verifier
-  code_verifier_hash = GNUNET_malloc (strlen (code_verifier));
+  code_verifier_hash = GNUNET_malloc (256 / 8);
   // hash code verifier
   gcry_md_hash_buffer (GCRY_MD_SHA256,
                        code_verifier_hash,
@@ -616,7 +616,7 @@ OIDC_parse_authz_code (const struct GNUNET_CRYPTO_EcdsaPrivateKey *ecdsa_priv,
                        strlen (code_verifier));
   // encode code verifier
   expected_code_challenge =
-    base64_encode (code_verifier_hash, strlen (code_verifier_hash));
+    base64_encode (code_verifier_hash, 256 / 8);
   code_challenge = (char*)&params[1];
   code_challenge_len = ntohl (params->code_challenge_len);
   GNUNET_free (code_verifier_hash);