Werner Koch 193815030d gpg: Fix possible read of unallocated memory ... * g10/parse-packet.c (can_handle_critical): Check content length before calling can_handle_critical_notation. -- The problem was found by Jan Bee and gniibe proposed the used fix. Thanks. This bug can't be exploited: Only if the announced length of the notation is 21 or 32 a memcmp against fixed strings using that length would be done. The compared data is followed by the actual signature and thus it is highly likely that not even read of unallocated memory will happen. Nevertheless such a bug needs to be fixed. Signed-off-by: Werner Koch <wk@gnupg.org>		2014-12-12 10:41:25 +01:00
..
armor.c	gpg: Remove PGP-2 related cruft.	2014-11-13 12:01:42 +01:00
build-packet.c	Avoid sign extension when shifting the MSB.	2014-11-05 08:23:15 +01:00
call-agent.c	Add option --no-autostart.	2014-11-28 09:44:19 +01:00
call-agent.h	gpg: Make card key generation work again.	2014-10-19 14:09:04 +02:00
call-dirmngr.c	Add option --no-autostart.	2014-11-28 09:44:19 +01:00
call-dirmngr.h	gpg: Print the actual used keyserver address.	2014-03-14 16:12:54 +01:00
card-util.c	gpg: Add OpenPGP card vendor 0x1337.	2014-12-08 11:46:48 +01:00
ChangeLog-2011	Generate the ChangeLog from commit logs.	2011-12-01 11:09:02 +01:00
cipher.c	gpg: Remove options --pgp2 and --rfc1991.	2014-08-14 11:03:55 +02:00
comment.c	Nuked almost all trailing white space.	2011-02-04 12:57:53 +01:00
compress-bz2.c	Nuked almost all trailing white space.	2011-02-04 12:57:53 +01:00
compress.c	gpg: Avoid infinite loop in uncompressing garbled packets.	2014-06-20 10:41:38 +02:00
cpr.c	common: Add cpr_get_answer_is_yes_def()	2014-07-23 14:35:22 +02:00
dearmor.c	gpg: Create exported secret files and revocs with mode 700.	2014-06-30 09:12:48 +02:00
decrypt-data.c	gpg: Change a bug() call to a regular error message.	2014-11-26 10:21:01 +01:00
decrypt.c	Silence several warnings when building under Windows.	2014-03-07 16:06:35 +01:00
dek.h	gpg: Remove cipher.h and put algo ids into a common file.	2014-01-29 20:35:05 +01:00
delkey.c	gpg: --delete-secret-key - check that a secret key exists.	2014-09-20 16:27:16 +02:00
distsigkey.gpg	Add more signing keys.	2014-10-31 14:21:34 +01:00
ecdh.c	gpg: Use only OpenPGP cipher algo ids.	2014-01-31 14:35:49 +01:00
encrypt.c	gpg: Remove option aliases --[no-]throw-keyid and --notation-data.	2014-12-03 11:28:10 +01:00
exec.c	Remove use of gnulib (part 2)	2014-11-11 15:14:31 +01:00
exec.h	Changed to GPLv3.	2007-07-04 19:49:40 +00:00
export.c	gpg: Fix export bug using exact search with only one key in the keybox.	2014-12-01 11:54:51 +01:00
filter.h	gpg: Remove PGP-2 related cruft.	2014-11-13 12:01:42 +01:00
free-packet.c	gpg: Remove cipher.h and put algo ids into a common file.	2014-01-29 20:35:05 +01:00
getkey.c	gpg: Fix endless loop in keylisting with fingerprint.	2014-11-02 16:36:40 +01:00
gpg-w32info.rc	w32: Add icons and version information.	2013-05-07 21:35:48 +02:00
gpg.c	gpg: Obsolete some keyserver helper options.	2014-12-08 15:14:35 +01:00
gpg.h	gpg: Fix informative printing of user ids.	2014-10-13 14:54:26 +02:00
gpgv.c	gpg: Remove PGP-2 related cruft.	2014-11-13 12:01:42 +01:00
helptext.c	Change all quotes in strings and comments to the new GNU standard.	2012-06-05 19:29:22 +02:00
import.c	gpg: Allow import of large keys.	2014-12-04 10:53:10 +01:00
kbnode.c	gpg: Fix a missing LF in debug output.	2014-11-13 17:01:17 +01:00
keydb.c	gpg: Fix export bug using exact search with only one key in the keybox.	2014-12-01 11:54:51 +01:00
keydb.h	gpg: Fix informative printing of user ids.	2014-10-13 14:54:26 +02:00
keyedit.c	gpg: Remove all support for v3 keys and always create v4-signatures.	2014-10-17 13:32:16 +02:00
keygen.c	gpg: Fix batch generation of ECC keys.	2014-11-24 11:56:49 +01:00
keyid.c	gpg: Remove all support for v3 keys and always create v4-signatures.	2014-10-17 13:32:16 +02:00
keylist.c	gpg: Improve perceived speed of secret key listings.	2014-11-12 12:41:20 +01:00
keyring.c	gpg: Fix --rebuild-keydb-caches.	2014-10-31 10:31:11 +01:00
keyring.h	Decryption and signi via agent is now implemented.	2010-04-23 11:36:59 +00:00
keyserver-internal.h	Initial code checking for backup - not yet working.	2011-01-10 14:30:17 +01:00
keyserver.c	gpg: Obsolete some keyserver helper options.	2014-12-08 15:14:35 +01:00
main.h	gpg: Make the use of "--verify FILE" for detached sigs harder.	2014-11-13 17:39:31 +01:00
mainproc.c	gpg: Change another BUG() call to a regular error message.	2014-11-28 12:20:42 +01:00
Makefile.am	Remove use of gnulib (part 1)	2014-11-11 10:13:10 +01:00
mdfilter.c	Nuked almost all trailing white space.	2011-02-04 12:57:53 +01:00
migrate.c	gpg: Change wording of a migration error message.	2014-10-09 10:56:25 +02:00
misc.c	gpg: Sync keylist output and warning messages.	2014-10-09 20:57:02 +02:00
openfile.c	gpg: Make the use of "--verify FILE" for detached sigs harder.	2014-11-13 17:39:31 +01:00
OPTIONS	See ChangeLog: Mon Jul 31 10:04:47 CEST 2000 Werner Koch	2000-07-31 08:04:16 +00:00
options.h	gpg: Obsolete some keyserver helper options.	2014-12-08 15:14:35 +01:00
options.skel	Change a couple of files to use abbreviated copyright notes.	2014-11-04 16:28:03 +01:00
packet.h	gpg: Remove all support for v3 keys and always create v4-signatures.	2014-10-17 13:32:16 +02:00
parse-packet.c	gpg: Fix possible read of unallocated memory	2014-12-12 10:41:25 +01:00
passphrase.c	Comment typo fixes.	2014-11-19 10:47:57 +01:00
photoid.c	gpg: New %U expando for the photo viewer.	2014-04-17 21:44:09 +02:00
photoid.h	Decryption and signi via agent is now implemented.	2010-04-23 11:36:59 +00:00
pkclist.c	gpg: Remove options --pgp2 and --rfc1991.	2014-08-14 11:03:55 +02:00
pkglue.c	gpg: Fix memory leak in ECC encryption.	2014-09-08 18:25:06 +02:00
pkglue.h	gpg: Use only OpenPGP public key algo ids and add the EdDSA algo id.	2014-01-30 18:48:37 +01:00
plaintext.c	gpg: Make the use of "--verify FILE" for detached sigs harder.	2014-11-13 17:39:31 +01:00
progress.c	Nuked almost all trailing white space.	2011-02-04 12:57:53 +01:00
pubkey-enc.c	Use a unique capitalization for "Note:".	2014-10-10 15:29:42 +02:00
pubring.asc	See ChangeLog: Mon Jul 31 10:04:47 CEST 2000 Werner Koch	2000-07-31 08:04:16 +00:00
revoke.c	gpg: Remove all support for v3 keys and always create v4-signatures.	2014-10-17 13:32:16 +02:00
rmd160.c	Nuked almost all trailing white space.	2011-02-04 12:57:53 +01:00
rmd160.h	Add missing header file.	2008-12-12 08:54:50 +00:00
seckey-cert.c	Add tweaks for the not anymore patented IDEA algorithm.	2012-05-08 18:18:32 +02:00
server.c	Remove support for the GPG_AGENT_INFO envvar.	2014-10-03 11:58:58 +02:00
seskey.c	gpg: Use only OpenPGP public key algo ids and add the EdDSA algo id.	2014-01-30 18:48:37 +01:00
sig-check.c	Use a unique capitalization for "Note:".	2014-10-10 15:29:42 +02:00
sign.c	gpg: Fix hash detection for ECDSA.	2014-11-20 20:09:17 +01:00
signal.c	Nuked almost all trailing white space.	2011-02-04 12:57:53 +01:00
skclist.c	gpg: Remove cipher.h and put algo ids into a common file.	2014-01-29 20:35:05 +01:00
t-rmd160.c	Nuked almost all trailing white space.	2011-02-04 12:57:53 +01:00
tdbdump.c	Change all quotes in strings and comments to the new GNU standard.	2012-06-05 19:29:22 +02:00
tdbio.c	Use a unique capitalization for "Note:".	2014-10-10 15:29:42 +02:00
tdbio.h	gpg: Do not require a trustdb with --always-trust.	2014-03-07 10:44:27 +01:00
textfilter.c	gpg: Remove all support for v3 keys and always create v4-signatures.	2014-10-17 13:32:16 +02:00
trust.c	Fix g10/trust.c.	2014-03-06 16:23:10 +09:00
trustdb.c	w32: Silence warnings about unused vars.	2014-03-07 16:11:15 +01:00
trustdb.h	gpg: Allow building without any trust model support.	2014-02-10 17:46:40 +01:00
verify.c	Change all quotes in strings and comments to the new GNU standard.	2012-06-05 19:29:22 +02:00
zlib-riscos.h	include: Remove this directory.	2014-01-29 17:45:05 +01:00