Home GnuPG

Fix other silent truncation of length fields.

Description

Fix other silent truncation of length fields.

* src/ber-help.h (MAX_CRL_NUMBER_LENGTH): New.
(MAX_NAME_URL_LENGTH): New.
* src/crl.c (ksba_crl_get_auth_key_id): Error out if the length is
  larger that a given limit.
(ksba_crl_get_crl_number): Ditto.
(parse_crl_entry): Ditto.
* src/name.c (_ksba_name_new_from_der): Ditto.
* src/ocsp.c (ksba_ocsp_get_responder_id): Ditto.
  • GnuPG-bug-id: T8246

Details

Provenance
wernerAuthored on Tue, May 5, 12:16 PM
Parents
rK55be6f57b636: Fix incorrect overflow guard condition in _ksba_ber_read_tl
Branches
Unknown
Tags
Unknown
Tasks
Unknown Object (Maniphest Task)