gpg: Don't use malloc for kek_params.
* g10/ecdh.c (pk_ecdh_default_params): Use stack for kek_params.
- GnuPG-bug-id: T5393
- Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
Description
Description
Details
Details
- Provenance
• gniibe Authored on Nov 12 2021, 7:09 AM - Parents
- rGfae1d2e2ccde: kbx: Avoid use of uninitialized value.
- Branches
- Unknown
- Tags
- Tasks
- T5393: gnupg coverity static analysis reports
Event Timeline
Comment Actions
The old code using sizeof(kek_params) (which is used for log_printhex) is incorrect; the value is the size of pointer to byte. It may works for 32-bit architectures, though.
On the machine which has 8 for a pointer, it will cause accessing wrong area, when DPG_CRYPTO is enabled.