Page MenuHome GnuPG
Create Task
Maniphest T7906

Memory Corruption in ASCII-Armor Parsing
Testing, NormalPublic
Actions

Description

armor_filter has a bug.
If control == IOBUFCTRL_UNDERFLOW && afx->inp_bypass is true, then *ret_len is greater than the requested size.

Reported-by: 49016 and Liam (two-heart)

Related Objects
Search...

StatusAssignedTask
Unknown Object (Maniphest Task)
 TestingNoneT7906 Memory Corruption in ASCII-Armor Parsing

Event Timeline

• gniibe created this task.Tue, Nov 4, 6:56 AM
• gniibe created this object in space Restricted Space.
• gniibe created this object with visibility "g10code (Project)".
• gniibe created this object with edit policy "g10code (Project)".

Fixed in rG115d138ba599: gpg: Fix possible memory corruption in the armor parser.

• gniibe mentioned this in Unknown Object (Maniphest Task).Mon, Nov 10, 2:51 AM
• werner changed the task status from Open to Testing.Wed, Nov 19, 5:37 PM
• werner triaged this task as Normal priority.
• werner mentioned this in T7940: Release GnuPG 2.5.15.
• werner shifted this object from the Restricted Space space to the S1 Public space.
• werner changed the visibility from "g10code (Project)" to "Public (No Login Required)".
• werner changed the edit policy from "g10code (Project)" to "Contributor (Project)".
• werner removed a project: g10code.
• werner mentioned this in T7869: Release GnuPG 2.5.14.Wed, Nov 19, 5:40 PM
• werner updated the task description. (Show Details)Wed, Nov 19, 5:49 PM