security-and-privacy/gnupg
security-and-privacy/gnupg
1
0
Fork 0
mirror of git://git.gnupg.org/gnupg.git synced 2025-07-02 22:46:30 +02:00
Code Activity

agent: Add some extra robustness to extract_private_key

Browse source 
* agent/cvt-openpgp.c (extract_private_key): Add arg "arraysize".
Make sure that R_FLAGS and R_CURVE are set to NULL.
--

Given that extract_private_key is not file local it is good to have some
extra asserts to protect against future wrong use.

Signed-off-by: Werner Koch <wk@gnupg.org>
This commit is contained in:
Werner Koch 2015-01-27 10:22:47 +01:00
parent f6d3c6e526
commit 7959654377
3 changed files with 13 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

2
agent/findkey.c
View file

@ -1005,7 +1005,7 @@ agent_public_key_from_file (ctrl_t ctrl,
array[i] = NULL;
err = extract_private_key (s_skey, 0, &algoname, &npkey, NULL, &elems,
array, &curve, &flags);
array, DIM (array), &curve, &flags);
if (err)
{
gcry_sexp_release (s_skey);