mirror of
https://github.com/linuxboot/heads.git
synced 2024-12-18 20:47:55 +00:00
286303d95c
Reading the file into a variable and then redirecting to stdin via echo() can cause the binary data to be truncated, leading to an invalid base32 value and failure to properly generate and validate the HOTP code. To resolve this, pass the file directly to hotp(), and ensure it is removed properly regardless of success or failure to prevent leakage. Fixes "Invalid base32 string" error seen when attempting to generate a new TOTP secret. Signed-off-by: Matt DeVillier <matt.devillier@puri.sm> |
||
---|---|---|
.. | ||
coreboot-4.8.1 | ||
flashrom-1.0 | ||
linux-4.14.62 | ||
busybox-1.28.0.patch | ||
cryptsetup-1.7.3.patch | ||
dropbear-2016.74.patch | ||
gpg2-2.2.10.patch | ||
gpg-1.4.21.patch | ||
kexec-2.0.16.patch | ||
libremkey-hotp-verification.patch | ||
lvm2-2.02.168.patch | ||
make-4.2.1.patch | ||
musl-cross.patch | ||
pciutils-3.5.4.patch |