It is possible to create an opaque MPI with a pointer of NULL but with NBITS > 0. The result is that gcry_mpi_cmp does a memcmp against a NULL pointer. This case should be caught. For now callers should take care not to create such an opaque MPI.
Description
Description
Revisions and Commits
Revisions and Commits
rG GnuPG | |||
rG86d84464ae11 gpg: Avoid NULL ptr access due to corrupted packets. | |||
rGf6caf5b17366 gpg: Avoid NULL ptr access due to corrupted packets. |
Status | Assigned | Task | ||
---|---|---|---|---|
Resolved | • werner | T5940 crash importing truncated subkeys | ||
Open | • werner | T5946 Make gcry_mpi_cmp more robust for opaque mpis |