mapper heap-buffer-overflow about pam_pkcs11 HOT 2 CLOSED

No -error is because from variable (initialized to mfile->pt) is not checked if it is properly \0-terminated.

It should be checked if read does not exceed buffer boundary using maybe memchr() function instead of strchr()?

from pam_pkcs11.

I have also found memory leaks and I am working on cleaning them up. There is also an issue with the from++ reading an invalid byte in valgrind. I'm thinking about the following to fix both of these issues:

while(*from && isspace(*from)) {
   if(from - mfile->buffer +1 >= mfile->length) {
      return 0;
   }
   from++;
}

from pam_pkcs11.