diff options
| author | Werner Koch <[email protected]> | 2020-09-22 09:45:32 +0000 |
|---|---|---|
| committer | Werner Koch <[email protected]> | 2020-09-22 09:45:32 +0000 |
| commit | e0a312bfd646485ae8a0ae5e26720fc1667c5490 (patch) | |
| tree | faaccdb821834878e9767dbcb28aaecbc26d089c /kbx/backend-sqlite.c | |
| parent | scd: Extend KEYPAIRINFO with an algorithm string. (diff) | |
| download | gnupg-e0a312bfd646485ae8a0ae5e26720fc1667c5490.tar.gz gnupg-e0a312bfd646485ae8a0ae5e26720fc1667c5490.zip | |
kbx: Add bounds check to detect corrupt keyboxes.
* kbx/keybox-dump.c (_keybox_dump_blob): Fix the fixmes.
--
kbxutil is a debug tool but nevertheless it should behave well and not
read beyond allocated buffers and in turn crash.
Vincent Ulitzsch and Dominik Maier were kind enough to report these
crashes along with a couple of test keyboxes and crash analysis.
Signed-off-by: Werner Koch <[email protected]>
Diffstat (limited to 'kbx/backend-sqlite.c')
0 files changed, 0 insertions, 0 deletions