diff options
| author | Werner Koch <[email protected]> | 2015-04-05 10:48:14 +0000 |
|---|---|---|
| committer | Werner Koch <[email protected]> | 2015-04-05 10:49:26 +0000 |
| commit | d901efcebaefaf6eae4a9b9aa8f0c2c055d3518a (patch) | |
| tree | 4d03e345d92a6354f549cfd5ec334642e96e08cf /g10/seskey.c | |
| parent | g10: Fix keytocard. (diff) | |
| download | gnupg-d901efcebaefaf6eae4a9b9aa8f0c2c055d3518a.tar.gz gnupg-d901efcebaefaf6eae4a9b9aa8f0c2c055d3518a.zip | |
gpg: Fix DoS while parsing mangled secret key packets.
* g10/parse-packet.c (parse_key): Check PKTLEN before calling mpi_read
et al.
--
Due to the missing length checks PKTLEN may turn negative. Because
PKTLEN is an unsigned int the malloc in read_rest would try to malloc
a too large number and terminate the process with "error reading rest
of packet: Cannot allocate memory".
Reported-by: Hanno Böck.
Signed-off-by: Werner Koch <[email protected]>
Diffstat (limited to 'g10/seskey.c')
0 files changed, 0 insertions, 0 deletions