security-and-privacy/gnupg
security-and-privacy/gnupg
1
0
Fork 0
mirror of git://git.gnupg.org/gnupg.git synced 2025-04-17 15:44:34 +02:00
Code Activity

gpg: Fix segv due to NULL value stored as opaque MPI

Browse Source 
* g10/build-packet.c (do_secret_key): Check for NULL return from
gcry_mpi_get_opaque.
* g10/keyid.c (hash_public_key): Ditto.
--

This is a backport of 76c8122adfed0f0f443cce7bda702ba2b39661b3 from
master to the STABLE-BRANCH-1-4

On the STABLE-BRANCH-1-4, we may also want to patch g10/seckey-cert.c,
but that has not been done in this patch.

This fix extends commmit 0835d2f44ef62eab51fce6a927908f544e01cf8f.

  gpg2 --export --no-default-keyring --keyring TESTDATA

With TESTDATA being below after unpacking.

-----BEGIN PGP ARMORED FILE-----

mBMEhdkMmS8BcX8F//8F5voEhQAQmBMEnAAAZwAAo4D/f/8EhQAAAIAEnP8EhQAQ
iBMEnP8AAAAABf8jIID///8EhQYQmBMEnIUAEIgTBKT/AAAAAAUAACCA/f//BIUA
EJgTBJx/AP8ABPPzBJx/AP8ABPPz
=2yE0
-----END PGP ARMORED FILE-----

Reported-by: Jodie Cunningham
[dkg: rebased to STABLE-BRANCH-1-4]
Signed-off-by: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
This commit is contained in:
Daniel Kahn Gillmor 2015-02-21 23:10:37 -05:00 committed by Werner Koch
parent a35ed8af41
commit 6f032181ba
No known key found for this signature in database
GPG Key ID: E3FDFF218E45B72B
2 changed files with 10 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
g10/build-packet.c
View File

@ -356,6 +356,7 @@ do_secret_key( IOBUF out, int ctb, PKT_secret_key *sk )
assert( mpi_is_opaque( sk->skey[npkey] ) ); assert( mpi_is_opaque( sk->skey[npkey] ) );
p = mpi_get_opaque( sk->skey[npkey], &ndata ); p = mpi_get_opaque( sk->skey[npkey], &ndata );
if (p)
iobuf_write(a, p, ndata ); iobuf_write(a, p, ndata );
} }
else if( sk->is_protected ) { else if( sk->is_protected ) {
@ -366,6 +367,7 @@ do_secret_key( IOBUF out, int ctb, PKT_secret_key *sk )
assert (mpi_is_opaque (sk->skey[i])); assert (mpi_is_opaque (sk->skey[i]));
p = mpi_get_opaque (sk->skey[i], &ndata); p = mpi_get_opaque (sk->skey[i], &ndata);
if (p)
iobuf_write (a, p, ndata); iobuf_write (a, p, ndata);
} }
write_16(a, sk->csum ); write_16(a, sk->csum );

4
g10/keyid.c
View File

@ -112,12 +112,16 @@ hash_public_key( MD_HANDLE md, PKT_public_key *pk )
md_putc( md, pk->pubkey_algo ); md_putc( md, pk->pubkey_algo );
if(npkey==0 && pk->pkey[0] && mpi_is_opaque(pk->pkey[0])) if(npkey==0 && pk->pkey[0] && mpi_is_opaque(pk->pkey[0]))
{
if (pp[0])
md_write(md,pp[0],nn[0]); md_write(md,pp[0],nn[0]);
}
else else
for(i=0; i < npkey; i++ ) for(i=0; i < npkey; i++ )
{ {
md_putc( md, nb[i]>>8); md_putc( md, nb[i]>>8);
md_putc( md, nb[i] ); md_putc( md, nb[i] );
if (pp[i])
md_write( md, pp[i], nn[i] ); md_write( md, pp[i], nn[i] );
xfree(pp[i]); xfree(pp[i]);
} }