Home GnuPG
Diffusion GnuPG a50093893cd1

gpgconf: Fix argv overflow if --homedir is used.

Description

gpgconf: Fix argv overflow if --homedir is used.

* tools/gpgconf-comp.c (gc_component_launch): Fix crash due to too
small array.

Depending on the stack layout this could have led to zeroing out the
PID variable if --homedir was used and thus under Windows to a leaked
handle. However, gpgconf is a short running process and thus no
really harm.

  • GnuPG-bug-id: T5366
  • Co-authored-by: cbiedl@gnupg.com
  • Signed-off-by: Werner Koch <wk@gnupg.org>

Details

Provenance
wernerAuthored on Mar 26 2021, 2:47 PM
Parents
rG87d7b7e07565: gpg: New option --force-sign-key
Branches
Unknown
Tags
Unknown
Tasks
T5366: "*** stack smashing detected ***" in test suite