Werner Koch a75790b740

gpg: Fix the fix out-of-bounds access. ...

* g10/tofu.c (build_conflict_set): Revert to int* and fix calloc.
--

The original code used an int array and thus better keep that and do
not limit it to 128 entries.

Fixes-commit: c3008bffac68b6f31e9ae9bad837cdce5de7c0db
Fixes-commit: 3b5b94ceab7c0ed9501c5cf54b4efa17fcd7300a
Signed-off-by: Werner Koch <wk@gnupg.org>

2016-12-08 17:03:26 +01:00

..

armor.c

Improve some comments.

2016-11-29 14:56:00 +01:00

build-packet.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

call-agent.c

gpg: New option --default-new-key-algo.

2016-12-02 19:47:40 +01:00

call-agent.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

call-dirmngr.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

call-dirmngr.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

card-util.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

ChangeLog-2011

Spelling: correct spelling of "passphrase".

2016-11-02 12:53:58 +01:00

cipher.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

compress-bz2.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

compress.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

cpr.c

Improve some comments.

2016-11-29 14:56:00 +01:00

dearmor.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

decrypt-data.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

decrypt.c

g10: Fix memory leak.

2016-11-29 16:48:35 +01:00

dek.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

delkey.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

dirmngr-conf.skel

dirmngr: Change the Onion keyserver in the conf template.

2015-12-23 20:06:49 +01:00

distsigkey.gpg

Add more signing keys.

2014-10-31 14:21:34 +01:00

ecdh.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

encrypt.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

exec.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

exec.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

export.c

gpg: New option --quick-set-expire.

2016-12-05 11:00:11 +01:00

filter.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

free-packet.c

gpg: Use usual free semantics for packet structure free functions.

2016-11-15 16:24:09 +01:00

getkey.c

gpg: Let only Dirmngr decide whether CERT is supported.

2016-12-01 16:40:32 +01:00

gpg-w32info.rc

w32: Add manifest to gpg.

2015-02-04 09:15:34 +01:00

gpg.c

g10: Avoid a memory leak.

2016-12-06 12:16:59 +01:00

gpg.h

doc: Add comment to make clear that KBNODE is deprecated.

2016-11-15 16:29:08 +01:00

gpg.w32-manifest.in

w32: Add manifest to gpg.

2015-02-04 09:15:34 +01:00

gpgcompose.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

gpgsql.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

gpgsql.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

gpgv.c

gpg,sm: Merge the two versions of check_special_filename.

2016-11-29 16:54:36 +01:00

helptext.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

import.c

g10: Cache the effective policy. Recompute it when required.

2016-11-21 22:47:30 +01:00

kbnode.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

keydb.c

g10: Cache the effective policy. Recompute it when required.

2016-11-21 22:47:30 +01:00

keydb.h

g10: Cache the effective policy. Recompute it when required.

2016-11-21 22:47:30 +01:00

keyedit.c

gpg: New option --quick-set-expire.

2016-12-05 11:00:11 +01:00

keygen.c

gpg: New option --default-new-key-algo.

2016-12-02 19:47:40 +01:00

keyid.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

keylist.c

g10: Avoid gratuitously loading a keyblock when it is already available

2016-11-23 12:29:22 +01:00

keyring.c

common: Rename keybox_file_rename to gnupg_rename_file.

2016-11-16 17:43:59 +01:00

keyring.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

keyserver-internal.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

keyserver.c

gpg: Let only Dirmngr decide whether CERT is supported.

2016-12-01 16:40:32 +01:00

main.h

gpg: New option --quick-set-expire.

2016-12-05 11:00:11 +01:00

mainproc.c

gpg: Fix error code arg in ERRSIG status line.

2016-12-03 21:36:14 +01:00

Makefile.am

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

mdfilter.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

migrate.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

misc.c

gpg: Add new compliance mode "de-vs".

2016-11-15 17:50:03 +01:00

openfile.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

OPTIONS

See ChangeLog: Mon Jul 31 10:04:47 CEST 2000 Werner Koch

2000-07-31 08:04:16 +00:00

options.h

gpg: New option --default-new-key-algo.

2016-12-02 19:47:40 +01:00

options.skel

gpg: Rework gpg-conf.skel

2016-01-22 10:54:10 +01:00

packet.h

Improve some comments.

2016-11-29 14:56:00 +01:00

parse-packet.c

Improve some comments.

2016-11-29 14:56:00 +01:00

passphrase.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

photoid.c

g10: Avoid gratuitously loading a keyblock when it is already available

2016-11-23 12:29:22 +01:00

photoid.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

pkclist.c

g10: Avoid gratuitously loading a keyblock when it is already available

2016-11-23 12:29:22 +01:00

pkglue.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

pkglue.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

plaintext.c

gpg: Make --decrypt with output '-&nnnn' work.

2016-11-29 16:54:36 +01:00

progress.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

pubkey-enc.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

pubring.asc

See ChangeLog: Mon Jul 31 10:04:47 CEST 2000 Werner Koch

2000-07-31 08:04:16 +00:00

revoke.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

rmd160.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

rmd160.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

seckey-cert.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

server.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

seskey.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

sig-check.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

sign.c

Improve some comments.

2016-11-29 14:56:00 +01:00

skclist.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

sqrtu32.c

g10: Add missing sqrtu32.h and sqrtu32.c.

2016-09-07 08:55:17 +02:00

sqrtu32.h

g10: Add missing sqrtu32.h and sqrtu32.c.

2016-09-07 08:55:17 +02:00

t-keydb-get-keyblock.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

t-keydb-get-keyblock.gpg

gpg: Correctly handle keyblocks followed by legacy keys.

2015-11-17 14:53:03 +01:00

t-keydb-keyring.kbx

g10: Add test for keydb as well as new testing infrastructure.

2015-09-02 15:08:57 +02:00

t-keydb.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

t-rmd160.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

t-stutter-data.asc

gpg: Add a new test.

2016-03-08 14:08:49 +01:00

t-stutter.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

tdbdump.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

tdbio.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

tdbio.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

test-stubs.c

g10: Avoid gratuitously loading a keyblock when it is already available

2016-11-23 12:29:22 +01:00

test.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

textfilter.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

tofu.c

gpg: Fix the fix out-of-bounds access.

2016-12-08 17:03:26 +01:00

tofu.h

g10: Remove dead code.

2016-12-06 12:16:56 +01:00

trust.c

g10: Avoid gratuitously loading a keyblock when it is already available

2016-11-23 12:29:22 +01:00

trustdb.c

g10: Avoid gratuitously loading a keyblock when it is already available

2016-11-23 12:29:22 +01:00

trustdb.h

g10: Avoid gratuitously loading a keyblock when it is already available

2016-11-23 12:29:22 +01:00

verify.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

zlib-riscos.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00