Werner Koch
ef0a3abf73
scd: Fix possible NULL deref in apdu.c
* scd/apdu.c (control_pcsc_direct): Take care of BUFLEN being NULL.
(control_pcsc_wrapped): Ditto.
--
pcsc_vendor_specific_init calls the above with BUFFER and BUFLEN as
NULL.
Reported by Stack 0.3:
bug: anti-dce
model: |
control_pcsc.exit77:
%retval.0.i.i76 = phi i32 [ %rc.0.i.i.i73, \
%pcsc_error_to_sw.exit.i.i74 ], [ 0, %if.end.i.i75 ]
%tobool198 = icmp ne i32 %retval.0.i.i76, 0, !dbg !728
br i1 %tobool198, label %if.then199, label %if.end200, !dbg !728
stack:
- /home/wk/s/gnupg/scd/apdu.c:1882:0
ncore: 1
core:
- /home/wk/s/gnupg/scd/apdu.c:1309:0
- buffer overflow
2015-03-15 12:15:55 +01:00
..
2015-03-15 12:15:55 +01:00
2014-12-15 17:38:40 +01:00
2014-07-25 09:43:29 +02:00
2013-02-08 09:06:39 +09:00
2011-02-04 12:57:53 +01:00
2011-02-04 12:57:53 +01:00
2015-02-11 10:28:25 +01:00
2015-03-09 11:00:03 +09:00
2014-09-18 15:39:50 +02:00
2014-08-14 14:09:37 +02:00
2014-12-15 17:38:40 +01:00
2014-08-26 17:47:54 +02:00
2011-12-15 15:21:02 +01:00
2011-02-04 12:57:53 +01:00
2011-02-04 12:57:53 +01:00
2011-02-04 12:57:53 +01:00
2012-06-05 19:29:22 +02:00
2015-02-11 10:28:25 +01:00
2014-06-27 10:07:28 +02:00
2011-12-01 11:09:02 +01:00
2014-12-22 13:17:50 +01:00
2014-12-15 17:38:40 +01:00
2013-02-08 09:06:39 +09:00
2014-11-11 10:13:10 +01:00
2015-01-13 12:23:23 +09:00
2013-02-05 13:37:06 +09:00
2013-05-07 21:35:48 +02:00
2015-01-28 19:57:22 +01:00
2013-02-08 09:06:39 +09:00