Vim Out-of-Bounds Read Fix in Sodium Crypto

Vulnerability Overview Vulnerability ID: 9.2.0671 Vulnerability Type: Security Vulnerability Description: An out-of-bounds read may occur when using sodium-encrypted files. Resolution: Verify that there is sufficient space before calling . Impact Scope Affected Files: - - - Fix Details Specific Changes: - In the file, a check for was added to ensure there is sufficient space before calling . - The modified code is as follows: Test Cases: - In the file, a test case was added to verify that the patched code correctly handles short body cases. - The test case code is as follows: ```vim func Test_crypt_sodium_short_body() CheckFeature sodium " A VimCrypt-041 file with a complete 36-byte header (12 magic + 16 salt + " 8 seed) but a body shorter than one secretstream header (24 bytes) used to " underflow the body length and crash with a wild out-of-bounds read in " crypto_secretstream_xchacha20poly1305_init_pull(). It must now fail cleanly. " Bytes: "VimCrypt-041" + 16 salt + 8 seed + 8-byte body = 44 bytes. call assert_fails('call writefile([0x56696d437279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404172797074041727970740417279707404

Goal Reached Thanks to every supporter — we hit 100%!

Vim Out-of-Bounds Read Fix in Sodium Crypto

More from this source