Home GnuPG
Diffusion GnuPG 1b309d9f6199

g10: Fix undefined behavior when EOF in parsing packet for S2K.

Description

g10: Fix undefined behavior when EOF in parsing packet for S2K.

* g10/parse-packet.c (parse_symkeyenc): Use iobuf_get_noeof.
(parse_key): Likewise.

When EOF comes at parsing s2k.count, it is possible the value will
be (unsigned long)-1. Then, the result of S2K_DECODE_COUNT will be
undefined. This patch fixes undefined behavior.

  • Reported-by: Philippe Antoine
  • GnuPG-bug-id: T4093
  • Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>

Details

Provenance
gniibeAuthored on Aug 10 2018, 8:29 AM
Parents
rGe88f56f1937a: gpg: Set a limit for a WKD import of 256 KiB.
Branches
Unknown
Tags
Unknown
Tasks
T4093: Undefined shift in parse_symkeyenc