From d855e4cac8303ad4e34ac31cfa7634286589ce99 Mon Sep 17 00:00:00 2001 From: practicalswift Date: Mon, 17 Sep 2018 16:30:08 +0200 Subject: Avoid triggering undefined behaviour (std::memset(nullptr, 0, 0)) if an invalid string is passed to DecodeSecret(...) --- src/key_io.cpp | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'src/key_io.cpp') diff --git a/src/key_io.cpp b/src/key_io.cpp index d998089535..1d53a5e074 100644 --- a/src/key_io.cpp +++ b/src/key_io.cpp @@ -142,7 +142,9 @@ CKey DecodeSecret(const std::string& str) key.Set(data.begin() + privkey_prefix.size(), data.begin() + privkey_prefix.size() + 32, compressed); } } - memory_cleanse(data.data(), data.size()); + if (!data.empty()) { + memory_cleanse(data.data(), data.size()); + } return key; } -- cgit v1.2.3