Werner Koch d901efceba

gpg: Fix DoS while parsing mangled secret key packets. ...

* g10/parse-packet.c (parse_key): Check PKTLEN before calling mpi_read
et al.
--

Due to the missing length checks PKTLEN may turn negative.  Because
PKTLEN is an unsigned int the malloc in read_rest would try to malloc
a too large number and terminate the process with "error reading rest
of packet: Cannot allocate memory".

Reported-by: Hanno Böck.
Signed-off-by: Werner Koch <wk@gnupg.org>

2015-04-05 12:49:26 +02:00

..

armor.c

gpg: Replace remaining old error code macros by GPG_ERR_.

2015-01-22 12:06:11 +01:00

build-packet.c

gpg: Create all MPIs with RFC-4880 correct length headers.

2015-03-16 20:14:58 +01:00

call-agent.c

g10: Fix keytocard.

2015-04-03 17:39:59 +09:00

call-agent.h

g10: Fix keytocard.

2015-04-03 17:39:59 +09:00

call-dirmngr.c

Add support to talking to LDAP key servers.

2015-03-23 19:58:29 +01:00

call-dirmngr.h

gpg: Print the actual used keyserver address.

2014-03-14 16:12:54 +01:00

card-util.c

g10: Fix keytocard.

2015-04-03 17:39:59 +09:00

ChangeLog-2011

Generate the ChangeLog from commit logs.

2011-12-01 11:09:02 +01:00

cipher.c

gpg: Remove options --pgp2 and --rfc1991.

2014-08-14 11:03:55 +02:00

comment.c

Nuked almost all trailing white space.

2011-02-04 12:57:53 +01:00

compress-bz2.c

Nuked almost all trailing white space.

2011-02-04 12:57:53 +01:00

compress.c

gpg: Replace remaining old error code macros by GPG_ERR_.

2015-01-22 12:06:11 +01:00

cpr.c

common: Add cpr_get_answer_is_yes_def()

2014-07-23 14:35:22 +02:00

dearmor.c

gpg: Create exported secret files and revocs with mode 700.

2014-06-30 09:12:48 +02:00

decrypt-data.c

gpg: Replace remaining old error code macros by GPG_ERR_.

2015-01-22 12:06:11 +01:00

decrypt.c

gpg: Replace remaining old error code macros by GPG_ERR_.

2015-01-22 12:06:11 +01:00

dek.h

gpg: Remove cipher.h and put algo ids into a common file.

2014-01-29 20:35:05 +01:00

delkey.c

gpg: --delete-secret-key - check that a secret key exists.

2014-09-20 16:27:16 +02:00

distsigkey.gpg

Add more signing keys.

2014-10-31 14:21:34 +01:00

ecdh.c

gpg: Clear a possible rest of the KDF secret buffer.

2015-01-05 15:15:28 +01:00

encrypt.c

gpg: Fix possible dead code elimination.

2015-03-15 14:01:36 +01:00

exec.c

gpg: Replace remaining old error code macros by GPG_ERR_.

2015-01-22 12:06:11 +01:00

exec.h

Changed to GPLv3.

2007-07-04 19:49:40 +00:00

export.c

gpg: Fix export bug using exact search with only one key in the keybox.

2014-12-01 11:54:51 +01:00

filter.h

gpg: Remove PGP-2 related cruft.

2014-11-13 12:01:42 +01:00

free-packet.c

gpg: Remove cipher.h and put algo ids into a common file.

2014-01-29 20:35:05 +01:00

getkey.c

gpg: Switch to a hash and CERT record based PKA system.

2015-02-25 16:34:19 +01:00

gpg-w32info.rc

w32: Add manifest to gpg.

2015-02-04 09:15:34 +01:00

gpg.c

gpg: Only use the last specified keyserver.

2015-03-28 16:55:37 +01:00

gpg.h

gpg: Replace remaining old error code macros by GPG_ERR_.

2015-01-22 12:06:11 +01:00

gpg.w32-manifest.in

w32: Add manifest to gpg.

2015-02-04 09:15:34 +01:00

gpgv.c

Add a hook to be called right after main.

2015-01-28 19:57:22 +01:00

helptext.c

Change all quotes in strings and comments to the new GNU standard.

2012-06-05 19:29:22 +02:00

import.c

gpg: Add dedicated error code for PGP-2 keys.

2015-01-22 14:39:31 +01:00

kbnode.c

gpg: Fix a missing LF in debug output.

2014-11-13 17:01:17 +01:00

keydb.c

gpg,w32: Handle forward slash in --keyring option.

2015-03-24 13:30:57 +01:00

keydb.h

gpg: Fix informative printing of user ids.

2014-10-13 14:54:26 +02:00

keyedit.c

g10: Fix keytocard.

2015-04-03 17:39:59 +09:00

keygen.c

g10: Fix keytocard.

2015-04-03 17:39:59 +09:00

keyid.c

gpg: Fix segv due to NULL value stored as opaque MPI.

2015-02-19 16:29:58 +01:00

keylist.c

gpg: Remove useless condition.

2015-03-15 12:39:56 +01:00

keyring.c

gpg: Prevent an invalid memory read using a garbled keyring.

2015-02-09 15:46:00 +01:00

keyring.h

Decryption and signi via agent is now implemented.

2010-04-23 11:36:59 +00:00

keyserver-internal.h

gpg: Remove unused args from a function.

2015-01-05 15:15:36 +01:00

keyserver.c

gpg: Fix memory leak due to PKA lookup.

2015-02-26 18:01:13 +01:00

main.h

Move new mailbox.c source file to common/.

2015-02-25 11:43:50 +01:00

mainproc.c

gpg: Emit status line NEWSIG before signature verification starts.

2015-03-19 20:38:25 +01:00

Makefile.am

Move new mailbox.c source file to common/.

2015-02-25 11:43:50 +01:00

mdfilter.c

Nuked almost all trailing white space.

2011-02-04 12:57:53 +01:00

migrate.c

gpg: Change wording of a migration error message.

2014-10-09 10:56:25 +02:00

misc.c

gpg: Allow printing of MPI values in --list-mode.

2015-03-16 20:12:44 +01:00

openfile.c

gpg: Make the use of "--verify FILE" for detached sigs harder.

2014-11-13 17:39:31 +01:00

OPTIONS

See ChangeLog: Mon Jul 31 10:04:47 CEST 2000 Werner Koch

2000-07-31 08:04:16 +00:00

options.h

gpg: Add command --print-pka-records.

2015-02-24 19:31:59 +01:00

options.skel

Change a couple of files to use abbreviated copyright notes.

2014-11-04 16:28:03 +01:00

packet.h

gpg: Remove all support for v3 keys and always create v4-signatures.

2014-10-17 13:32:16 +02:00

parse-packet.c

gpg: Fix DoS while parsing mangled secret key packets.

2015-04-05 12:49:26 +02:00

passphrase.c

Comment typo fixes.

2014-11-19 10:47:57 +01:00

photoid.c

gpg: New %U expando for the photo viewer.

2014-04-17 21:44:09 +02:00

photoid.h

Decryption and signi via agent is now implemented.

2010-04-23 11:36:59 +00:00

pkclist.c

gpg: Replace remaining old error code macros by GPG_ERR_.

2015-01-22 12:06:11 +01:00

pkglue.c

gpg: Fix memory leak in ECC encryption.

2014-09-08 18:25:06 +02:00

pkglue.h

gpg: Use only OpenPGP public key algo ids and add the EdDSA algo id.

2014-01-30 18:48:37 +01:00

plaintext.c

gpg: Replace remaining old error code macros by GPG_ERR_.

2015-01-22 12:06:11 +01:00

progress.c

Nuked almost all trailing white space.

2011-02-04 12:57:53 +01:00

pubkey-enc.c

Use inline functions to convert buffer data to scalars.

2015-02-11 10:28:25 +01:00

pubring.asc

See ChangeLog: Mon Jul 31 10:04:47 CEST 2000 Werner Koch

2000-07-31 08:04:16 +00:00

revoke.c

gpg: Replace remaining old error code macros by GPG_ERR_.

2015-01-22 12:06:11 +01:00

rmd160.c

Nuked almost all trailing white space.

2011-02-04 12:57:53 +01:00

rmd160.h

Add missing header file.

2008-12-12 08:54:50 +00:00

seckey-cert.c

Use inline functions to convert buffer data to scalars.

2015-02-11 10:28:25 +01:00

server.c

Remove support for the GPG_AGENT_INFO envvar.

2014-10-03 11:58:58 +02:00

seskey.c

gpg: Use only OpenPGP public key algo ids and add the EdDSA algo id.

2014-01-30 18:48:37 +01:00

sig-check.c

gpg: Replace remaining uses of stdio by estream.

2015-02-19 17:22:27 +01:00

sign.c

gpg: Replace remaining uses of stdio by estream.

2015-02-19 17:22:27 +01:00

signal.c

Nuked almost all trailing white space.

2011-02-04 12:57:53 +01:00

skclist.c

gpg: Remove cipher.h and put algo ids into a common file.

2014-01-29 20:35:05 +01:00

t-rmd160.c

Nuked almost all trailing white space.

2011-02-04 12:57:53 +01:00

tdbdump.c

gpg: Replace remaining uses of stdio by estream.

2015-02-19 17:22:27 +01:00

tdbio.c

gpg: Replace remaining uses of stdio by estream.

2015-02-19 17:22:27 +01:00

tdbio.h

gpg: Replace remaining uses of stdio by estream.

2015-02-19 17:22:27 +01:00

textfilter.c

gpg: Remove all support for v3 keys and always create v4-signatures.

2014-10-17 13:32:16 +02:00

trust.c

Use inline functions to convert buffer data to scalars.

2015-02-11 10:28:25 +01:00

trustdb.c

gpg: avoid chatter about trustdb when --quiet

2015-03-04 14:31:45 +01:00

trustdb.h

gpg: Allow building without any trust model support.

2014-02-10 17:46:40 +01:00

verify.c

gpg: Replace remaining old error code macros by GPG_ERR_.

2015-01-22 12:06:11 +01:00

zlib-riscos.h

include: Remove this directory.

2014-01-29 17:45:05 +01:00