- djm@cvs.openbsd.org 2004/05/09 01:26:48

     [kex.c]
     don't overwrite what we are trying to compute

diff --git a/ChangeLog b/ChangeLog
index 7c8cfde054be1e4f11007103832e40aaa5793584..7388ca86cd9c2a32706971cc61cbe2b903df6a55 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -24,6 +24,9 @@
      [OVERVIEW auth-rsa.c auth1.c kex.c monitor.c session.c sshconnect1.c
      sshd.c] removed: mpaux.c mpaux.h
      kill some more tiny files; ok deraadt@
+   - djm@cvs.openbsd.org 2004/05/09 01:26:48
+     [kex.c]
+     don't overwrite what we are trying to compute
 
 20040502
  - (dtucker) OpenBSD CVS Sync

diff --git a/kex.c b/kex.c
index 30dd58a78e362d0502fc391560a2cd14b766357a..fa5de7ed8bef25f2d9384ab18d5793bff4c59e70 100644 (file)
--- a/kex.c
+++ b/kex.c
@@ -23,7 +23,7 @@
  */
 
 #include "includes.h"
-RCSID("$OpenBSD: kex.c,v 1.57 2004/05/09 01:19:27 djm Exp $");
+RCSID("$OpenBSD: kex.c,v 1.58 2004/05/09 01:26:48 djm Exp $");
 
 #include <openssl/crypto.h>
 
@@ -504,7 +504,7 @@ derive_ssh1_session_id(BIGNUM *host_modulus, BIGNUM *server_modulus,
 
        EVP_DigestUpdate(&md, cookie, 8);
 
-       EVP_DigestFinal(&md, id, NULL);
+       EVP_DigestFinal(&md, obuf, NULL);
        memcpy(id, obuf, 16);
 
        memset(nbuf, 0, sizeof(nbuf));