diff options
| author | Werner Koch <wk@gnupg.org> | 2015-04-05 12:48:14 +0200 |
|---|---|---|
| committer | Werner Koch <wk@gnupg.org> | 2015-04-05 12:49:26 +0200 |
| commit | d901efcebaefaf6eae4a9b9aa8f0c2c055d3518a (patch) | |
| tree | 4d03e345d92a6354f549cfd5ec334642e96e08cf /g10/pubkey-enc.c | |
| parent | g10: Fix keytocard. (diff) | |
| download | gnupg2-d901efcebaefaf6eae4a9b9aa8f0c2c055d3518a.tar.xz gnupg2-d901efcebaefaf6eae4a9b9aa8f0c2c055d3518a.zip | |
gpg: Fix DoS while parsing mangled secret key packets.
* g10/parse-packet.c (parse_key): Check PKTLEN before calling mpi_read
et al.
--
Due to the missing length checks PKTLEN may turn negative. Because
PKTLEN is an unsigned int the malloc in read_rest would try to malloc
a too large number and terminate the process with "error reading rest
of packet: Cannot allocate memory".
Reported-by: Hanno Böck.
Signed-off-by: Werner Koch <wk@gnupg.org>
Diffstat (limited to 'g10/pubkey-enc.c')
0 files changed, 0 insertions, 0 deletions