diff options
| author | Werner Koch <[email protected]> | 2019-05-21 14:25:56 +0000 |
|---|---|---|
| committer | Werner Koch <[email protected]> | 2019-05-21 14:25:56 +0000 |
| commit | 156788a43c20e38cd52f4f725395aff2c72142ff (patch) | |
| tree | d5a2f0a0b9eb9971b5d19105f647ea224a16b120 /g10/parse-packet.c | |
| parent | gpg: Unify the the use of the print_pubkey_info functions. (diff) | |
| download | gnupg-156788a43c20e38cd52f4f725395aff2c72142ff.tar.gz gnupg-156788a43c20e38cd52f4f725395aff2c72142ff.zip | |
gpg: Do not allow creation of user ids larger than our parser allows.
* g10/parse-packet.c: Move max packet lengths constants to ...
* g10/packet.h: ... here.
* g10/build-packet.c (do_user_id): Return an error if too data is too
large.
* g10/keygen.c (write_uid): Return an error for too large data.
--
This can lead to keyring corruption becuase we expect that our parser
is abale to parse packts created by us. Test case is
gpg --batch --passphrase 'abc' -v \
--quick-gen-key $(yes 'a'| head -4000|tr -d '\n')
GnuPG-bug-id: 4532
Signed-off-by: Werner Koch <[email protected]>
Diffstat (limited to 'g10/parse-packet.c')
| -rw-r--r-- | g10/parse-packet.c | 6 |
1 files changed, 0 insertions, 6 deletions
diff --git a/g10/parse-packet.c b/g10/parse-packet.c index f67edc547..ab82d475a 100644 --- a/g10/parse-packet.c +++ b/g10/parse-packet.c @@ -38,12 +38,6 @@ #include "../common/mbox-util.h" -/* Maximum length of packets to avoid excessive memory allocation. */ -#define MAX_KEY_PACKET_LENGTH (256 * 1024) -#define MAX_UID_PACKET_LENGTH ( 2 * 1024) -#define MAX_COMMENT_PACKET_LENGTH ( 64 * 1024) -#define MAX_ATTR_PACKET_LENGTH ( 16 * 1024*1024) - static int mpi_print_mode; static int list_mode; static estream_t listfp; |