Home GnuPG

sexp: Add length check DATALEN when parsing SEXP.

Description

sexp: Add length check DATALEN when parsing SEXP.

* src/sexp.c (do_vsexp_sscan): Raise an error when the length
cannot be represented by the DATALEN type.
  • Reported-by: Ciwan Öztopal
  • GnuPG-bug-id: T8267
  • Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>

Details

Provenance
gniibeAuthored on Jun 4 2026, 7:14 AM
Parents
rC9774fd1d9d63: cipher:gcm: Silence GCC 15 warning.
Branches
Unknown
Tags
Unknown
Tasks
T8267: s-expression parser datalen overflow