search for: cardpin

Displaying 4 results from an estimated 4 matches for "cardpin".

Did you mean: cardon
2018 May 07
2
[DbgInfo] Potential bug in location list address ranges
...> Thank you all for taking a look at this. I pasted the C source then > deleted it because I was afraid that it was too long to read... > > Here's the code of *foo*. Its real name is *verifyPIN*. The variable *bar* > is *userPin*. > > int *verifyPIN*(char **userPin*, char *cardPin, int *cpt) > { > int i; > int status; > int diff; > > if (*cpt > 0) { > status = 0x55; > diff = 0x55; > > for (i = 0; i < 4; i++) { > if (*userPin*[i] != cardPin[i]) { > diff = 0xAA; > } > } > > if...
2018 Apr 27
0
[DbgInfo] Potential bug in location list address ranges
Thank you all for taking a look at this. I pasted the C source then deleted it because I was afraid that it was too long to read... Here's the code of *foo*. Its real name is *verifyPIN*. The variable *bar* is *userPin*. int *verifyPIN*(char **userPin*, char *cardPin, int *cpt) { int i; int status; int diff; if (*cpt > 0) { status = 0x55; diff = 0x55; for (i = 0; i < 4; i++) { if (*userPin*[i] != cardPin[i]) { diff = 0xAA; } } if (diff == 0x55) { status = 0xAA; } else { status = 0x55;...
2018 May 07
0
[DbgInfo] Potential bug in location list address ranges
....com>> wrote: > Thank you all for taking a look at this. I pasted the C source then deleted it because I was afraid that it was too long to read... > > Here's the code of foo. Its real name is verifyPIN. The variable bar is userPin. > > int verifyPIN(char *userPin, char *cardPin, int *cpt) > { > int i; > int status; > int diff; > > if (*cpt > 0) { > status = 0x55; > diff = 0x55; > > for (i = 0; i < 4; i++) { > if (userPin[i] != cardPin[i]) { > diff = 0xAA; > } > } > > i...
2018 Apr 27
2
[DbgInfo] Potential bug in location list address ranges
As Adrian said, we'd need to see the source of foo() to assess what the location-list for bar ought to be. Without actually going to look, I would guess that 'poplt' is considered a conditional move, therefore r4's contents are not guaranteed after it executes (i.e. it is a clobber). If one operand of 'poplt' is 'pc' then of course it is also a conditional indirect