Subj : src/hash/sha256.c
To   : Git commit to main/sbbs/master
From : Rob Swindell (on Debian Linux)
Date : Tue May 05 2026 15:55:25

https://gitlab.synchro.net/main/sbbs/-/commit/f2e7d0427a6cdaa762b19c26
Modified Files:
	src/hash/sha256.c
Log Message:
SHA256Final: skip zero-length pad memset at block boundary (CID 645972)

When the 0x80 terminator lands on the last byte of the block, buf_off
advances to SHA256_BLOCK_SIZE and the subsequent memset is called as
memset(buffer + 64, 0, 0). The size-zero call is harmless, but forming
a one-past-the-end pointer trips Coverity's OVERRUN checker. Guard the
memset on buf_off < SHA256_BLOCK_SIZE; behavior is unchanged.

---
 þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net

.