Werner Koch be8b30f8eb

kbx: Add bounds check to detect corrupt keyboxes. ...

* kbx/keybox-dump.c (_keybox_dump_blob): Fix the fixmes.  Add support
for 32 byte fingerprints.
--

kbxutil is a debug tool but nevertheless it should behave well and not
read beyond allocated buffers and in turn crash.

Vincent Ulitzsch and Dominik Maier were kind enough to report these
crashes along with a couple of test keyboxes and crash analysis.

Signed-off-by: Werner Koch <wk@gnupg.org>

Backported from master and while doing that adding also the support
for OpenPGP v5 keys.

Signed-off-by: Werner Koch <wk@gnupg.org>

2020-09-22 11:53:01 +02:00

..

ChangeLog-2011

Generate the ChangeLog from commit logs.

2011-12-01 11:09:02 +01:00

kbxutil.c

gpg: Implement searching keys via keygrip.

2019-01-29 20:19:22 +01:00

keybox-blob.c

spelling: Fix "synchronize"

2019-06-23 20:17:47 -04:00

keybox-defs.h

gpg: Implement searching keys via keygrip.

2019-01-29 20:19:22 +01:00

keybox-dump.c

kbx: Add bounds check to detect corrupt keyboxes.

2020-09-22 11:53:01 +02:00

keybox-errors.c

Nuked almost all trailing white space.

2011-02-04 12:57:53 +01:00

keybox-file.c

kbx: Unify blob reading functions.

2017-04-01 11:10:47 +02:00

keybox-init.c

gpg: Implement keybox compression run

2019-08-23 16:18:07 +02:00

keybox-openpgp.c

gpg: Implement searching keys via keygrip.

2019-01-29 20:19:22 +01:00

keybox-search-desc.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

keybox-search.c

kbx: Fix an endless loop under Windows due to an incomplete fix.

2019-05-16 14:03:00 +02:00

keybox-update.c

kbx: Allow "gpgsm --faked-system-time" to kick off a compression run.

2019-08-23 15:58:27 +02:00

keybox-util.c

kbx: Simplify by removing custom memory functions.

2017-12-22 12:55:46 +01:00

keybox.h

gpg: Implement keybox compression run

2019-08-23 16:18:07 +02:00

Makefile.am

Remove -I option to common.

2017-03-07 20:25:54 +09:00

Manifest

The keybox gets now compressed after 3 hours and ephemeral

2004-04-26 08:09:25 +00:00

mkerrors

Nuked almost all trailing white space.

2011-02-04 12:57:53 +01:00