Home GnuPG
Diffusion GnuPG 0835d2f44ef6

gpg: Fix a NULL-deref in export due to invalid packet lengths.
0835d2f44ef6Unpublished

Unpublished Commit · Learn More

Not On Permanent Ref: This commit is not an ancestor of any permanent ref.

Description

gpg: Fix a NULL-deref in export due to invalid packet lengths.

* g10/build-packet.c (write_fake_data): Take care of a NULL stored as
opaque MPI.

Test data:

gpg2 --no-default-keyring --keyring FILE --export

With this unpacked data for FILE:

-----BEGIN PGP ARMORED FILE-----
Version: GnuPG v2
Comment: Use "gpg --dearmor" for unpacking

mI0EGRkZGRkZGRkZGRkZGRkBGRkZGRkZGRkZGRkZGQAZGRkZGRkZGRkZGRkZGRkZ
GRkZInzgDbpa/9gQ4wq9////f3Vy81CkyVq3HQaqgZLZOeqPjM7XgGh5hJvAkpec
9wAAAgDHe0FVFbkppJZXP+gFs6z3gobS0qUFeyTtxs+wAgAD

JDFT

-----END PGP ARMORED FILE-----

  • Reported-by: Hanno Böck <hanno@hboeck.de>
  • Signed-off-by: Werner Koch <wk@gnupg.org>

Details

Provenance
wernerAuthored on Feb 9 2015, 10:54 AM
Parents
rG399784878630: gpg: Fix a NULL-deref due to empty ring trust packets.
Branches
Unknown
Tags
Unknown

Event Timeline