common: Fix read buffer over-read in uncompress_ecc_q_in_canon_sexp.
* common/sexputil.c (uncompress_ecc_q_in_canon_sexp): Only call memcmp if the lengths are equal.
- GnuPG-bug-id: T7662
- Signed-off-by: Collin Funk <collin.funk1@gmail.com>
Description
Description
Details
Details
- Provenance
Collin Funk via Gnupg-devel <gnupg-devel@gnupg.org> Authored on Sat, May 24, 8:52 AM • werner Committed on Sat, May 24, 1:31 PM - Parents
- rG23ccad05c680: gpg: Do not allow compressed key packets on import.
- Branches
- Unknown
- Tags
- References
- STABLE-BRANCH-2-4
- Tasks
- T7662: GPG's uncompress_ecc_q_in_canon_sexp reads past a constant string into rodata