Werner Koch d6ca407a27 gpg: Avoid infinite loop in uncompressing garbled packets. ...

* g10/compress.c (do_uncompress): Limit the number of extra FF bytes.
--

A packet like (a3 01 5b ff) leads to an infinite loop.  Using
--max-output won't help if it is a partial packet.  This patch
actually fixes a regression introduced on 1999-05-31 (c34c6769).
Actually it would be sufficient to stuff just one extra 0xff byte.
Given that this problem popped up only after 15 years, I feel safer to
allow for a very few FF bytes.

Thanks to Olivier Levillain and Florian Maury for their detailed
report.

2014-06-20 10:41:38 +02:00

..

armor.c

gpg: Change armor Version header to emit only the major version.

2013-11-27 09:20:02 +01:00

build-packet.c

gpg: Use only OpenPGP public key algo ids and add the EdDSA algo id.

2014-01-30 18:48:37 +01:00

call-agent.c

gpg: Fix a couple of spelling errors

2014-06-17 11:42:39 +02:00

call-agent.h

gpg: Re-enable secret key deletion.

2014-04-15 19:44:50 +02:00

call-dirmngr.c

Use "samethread" mode keyword for some es_fopenmem.

2014-05-06 09:49:26 +02:00

call-dirmngr.h

gpg: Print the actual used keyserver address.

2014-03-14 16:12:54 +01:00

card-util.c

Change some keyedit functions to allow printing to arbitrary streams.

2014-03-27 12:59:55 +01:00

ChangeLog-2011

Generate the ChangeLog from commit logs.

2011-12-01 11:09:02 +01:00

cipher.c

Replace gcry_md_start_debug by gcry_md_debug.

2011-09-20 09:54:27 +02:00

comment.c

Nuked almost all trailing white space.

2011-02-04 12:57:53 +01:00

compress-bz2.c

Nuked almost all trailing white space.

2011-02-04 12:57:53 +01:00

compress.c

gpg: Avoid infinite loop in uncompressing garbled packets.

2014-06-20 10:41:38 +02:00

cpr.c

gpg: Start using OpenPGP digest algo ids.

2014-01-31 15:33:03 +01:00

dearmor.c

Silence several warnings when building under Windows.

2014-03-07 16:06:35 +01:00

decrypt-data.c

gpg: Remove useless diagnostic in MDC verification.

2014-05-14 08:56:39 +02:00

decrypt.c

Silence several warnings when building under Windows.

2014-03-07 16:06:35 +01:00

dek.h

gpg: Remove cipher.h and put algo ids into a common file.

2014-01-29 20:35:05 +01:00

delkey.c

gpg: Re-enable secret key deletion.

2014-04-15 19:44:50 +02:00

ecdh.c

gpg: Use only OpenPGP cipher algo ids.

2014-01-31 14:35:49 +01:00

encrypt.c

Silence several warnings when building under Windows.

2014-03-07 16:06:35 +01:00

exec.c

w32: Include winsock2.h to silence warnings.

2014-03-07 14:18:43 +01:00

exec.h

Changed to GPLv3.

2007-07-04 19:49:40 +00:00

export.c

gpg: Fix regression in secret key export.

2014-04-15 19:44:42 +02:00

filter.h

gpg: Remove cipher.h and put algo ids into a common file.

2014-01-29 20:35:05 +01:00

free-packet.c

gpg: Remove cipher.h and put algo ids into a common file.

2014-01-29 20:35:05 +01:00

getkey.c

gpg: Fix bug parsing a zero length user id.

2014-06-02 11:47:25 +02:00

gpg-w32info.rc

w32: Add icons and version information.

2013-05-07 21:35:48 +02:00

gpg.c

gpg: Auto-migrate existing secring.gpg.

2014-06-05 11:19:59 +02:00

gpg.h

gpg: Remove cipher.h and put algo ids into a common file.

2014-01-29 20:35:05 +01:00

gpgv.c

gpgv: Init Libgcrypt to avoid syslog warning.

2014-03-07 09:58:22 +01:00

helptext.c

Change all quotes in strings and comments to the new GNU standard.

2012-06-05 19:29:22 +02:00

import.c

gpg: Auto-migrate existing secring.gpg.

2014-06-05 11:19:59 +02:00

kbnode.c

Fix minor compiler warnings.

2013-11-15 15:49:34 +01:00

keydb.c

gpg: Fix uninitialized access to search descindex with gpg keyboxes.

2014-05-14 18:13:11 +02:00

keydb.h

gpg: Re-enable secret key deletion.

2014-04-15 19:44:50 +02:00

keyedit.c

Make more use of *_NAME macros.

2014-05-08 10:28:23 +02:00

keygen.c

gpg: Require confirmation for --gen-key with experimental curves.

2014-06-05 12:03:27 +02:00

keyid.c

gpg: Avoid NULL-deref in default key listing.

2014-06-02 19:54:22 +02:00

keylist.c

Add new option --with-secret.

2014-06-03 21:35:59 +02:00

keyring.c

Make use of the *_NAME etc macros.

2013-11-18 14:09:47 +01:00

keyring.h

Decryption and signi via agent is now implemented.

2010-04-23 11:36:59 +00:00

keyserver-internal.h

Initial code checking for backup - not yet working.

2011-01-10 14:30:17 +01:00

keyserver.c

gpg: Make --auto-key-locate work again with keyservers.

2014-03-17 15:39:33 +01:00

main.h

gpg: Auto-migrate existing secring.gpg.

2014-06-05 11:19:59 +02:00

mainproc.c

gpg: Simplify default key listing.

2014-06-02 19:50:18 +02:00

Makefile.am

gpg: Auto-migrate existing secring.gpg.

2014-06-05 11:19:59 +02:00

mdfilter.c

Nuked almost all trailing white space.

2011-02-04 12:57:53 +01:00

migrate.c

gpg: Auto-migrate existing secring.gpg.

2014-06-05 11:19:59 +02:00

misc.c

gpg: Avoid NULL-deref in default key listing.

2014-06-02 19:54:22 +02:00

openfile.c

Make use of the *_NAME etc macros.

2013-11-18 14:09:47 +01:00

OPTIONS

See ChangeLog: Mon Jul 31 10:04:47 CEST 2000 Werner Koch

2000-07-31 08:04:16 +00:00

options.h

Add new option --with-secret.

2014-06-03 21:35:59 +02:00

options.skel

gpg: Remove legacy keyserver examples from the template conf file.

2014-03-07 09:53:29 +01:00

packet.h

gpg: Remove cipher.h and put algo ids into a common file.

2014-01-29 20:35:05 +01:00

parse-packet.c

gpg: Improve the output of --list-packets

2014-06-12 14:41:40 +02:00

passphrase.c

gpg: Re-enable secret key deletion.

2014-04-15 19:44:50 +02:00

photoid.c

gpg: New %U expando for the photo viewer.

2014-04-17 21:44:09 +02:00

photoid.h

Decryption and signi via agent is now implemented.

2010-04-23 11:36:59 +00:00

pkclist.c

gpg: Use more specific reason codes for INV_RECP.

2014-06-10 14:54:55 +02:00

pkglue.c

gpg: Use only OpenPGP public key algo ids and add the EdDSA algo id.

2014-01-30 18:48:37 +01:00

pkglue.h

gpg: Use only OpenPGP public key algo ids and add the EdDSA algo id.

2014-01-30 18:48:37 +01:00

plaintext.c

Change all quotes in strings and comments to the new GNU standard.

2012-06-05 19:29:22 +02:00

progress.c

Nuked almost all trailing white space.

2011-02-04 12:57:53 +01:00

pubkey-enc.c

ECC Fixes.

2014-04-28 10:36:16 +09:00

pubring.asc

See ChangeLog: Mon Jul 31 10:04:47 CEST 2000 Werner Koch

2000-07-31 08:04:16 +00:00

revoke.c

Silence several warnings when building under Windows.

2014-03-07 16:06:35 +01:00

rmd160.c

Nuked almost all trailing white space.

2011-02-04 12:57:53 +01:00

rmd160.h

Add missing header file.

2008-12-12 08:54:50 +00:00

seckey-cert.c

Add tweaks for the not anymore patented IDEA algorithm.

2012-05-08 18:18:32 +02:00

server.c

Silence several warnings when building under Windows.

2014-03-07 16:06:35 +01:00

seskey.c

gpg: Use only OpenPGP public key algo ids and add the EdDSA algo id.

2014-01-30 18:48:37 +01:00

sig-check.c

gpg: Reject signatures made with MD5.

2014-03-17 18:14:23 +01:00

sign.c

gpg: Change pinentry prompt to talk about "secret key".

2014-04-15 19:29:57 +02:00

signal.c

Nuked almost all trailing white space.

2011-02-04 12:57:53 +01:00

skclist.c

gpg: Remove cipher.h and put algo ids into a common file.

2014-01-29 20:35:05 +01:00

t-rmd160.c

Nuked almost all trailing white space.

2011-02-04 12:57:53 +01:00

tdbdump.c

Change all quotes in strings and comments to the new GNU standard.

2012-06-05 19:29:22 +02:00

tdbio.c

Silence more warnings about unused vars and args.

2014-03-07 19:05:41 +01:00

tdbio.h

gpg: Do not require a trustdb with --always-trust.

2014-03-07 10:44:27 +01:00

textfilter.c

Started to implement the audit log feature.

2007-11-19 16:03:50 +00:00

trust.c

Fix g10/trust.c.

2014-03-06 16:23:10 +09:00

trustdb.c

w32: Silence warnings about unused vars.

2014-03-07 16:11:15 +01:00

trustdb.h

gpg: Allow building without any trust model support.

2014-02-10 17:46:40 +01:00

verify.c

Change all quotes in strings and comments to the new GNU standard.

2012-06-05 19:29:22 +02:00

zlib-riscos.h

include: Remove this directory.

2014-01-29 17:45:05 +01:00