net-md5: fix buffer overflow in prepare()

Related to #5157
openwall · Jul 2, 2022 · 1b47abf · 1b47abf
1 parent a705c98
commit 1b47abf
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/src/net_md5_fmt_plug.c b/src/net_md5_fmt_plug.c
@@ -275,6 +275,8 @@ static char *prepare(char *fields[10], struct fmt_main *self) {
 		get_ptr();
 		if (text_in_dynamic_format_already(pDynamicFmt, hash))
 			return hash;
+		if (strlen(hash) + TAG_LENGTH + 1 > sizeof(buf))
+			return hash;
 		sprintf(buf, "%s%s", FORMAT_TAG, hash);
 		return buf;
 	}