Home GnuPG
Diffusion GnuPG d2fe2ffd7537

sm: Fix a bug in the rfc2253 parser

Description

sm: Fix a bug in the rfc2253 parser

* sm/certdump.c (parse_dn_part): Fix parser flaw.

This could in theory result in reading bytes after a after Nul in a
string and thus possible segv on unallocated memory or reading other
parts of the memory. However, it is harmless because the rfc2253
strings have been constructed by libksba.

  • GnuPG-bug-id: T5037
  • Signed-off-by: Werner Koch <wk@gnupg.org>

Details

Provenance
wernerAuthored on Aug 28 2020, 9:07 AM
Parents
rGf799b3ddbb4a: Post release updates
Branches
Unknown
Tags
Unknown
Tasks
T5037: dn.cpp:181: suspicious loop