Werner Koch a838e8f806 agent: Fix length test in sshcontrol parser. ...

* agent/command-ssh.c (ssh_search_control_file): Check S before
upcasing it.
--

In contradiction to the comment we did not check the length of HEXGRIP
and thus the GPG_ERR_INV_LENGTH was never triggered.

Detected by Stack 0.3:

  bug: anti-simplify
  model: |
    %cmp8 = icmp ne i32 %i.0, 40, !dbg !986
    -->  false
  stack:
    - /home/wk/s/gnupg/agent/command-ssh.c:1226:0
  ncore: 2
  core:
    - /home/wk/s/gnupg/agent/command-ssh.c:1225:0
      - buffer overflow
    - /home/wk/s/gnupg/agent/command-ssh.c:1225:0
      - buffer overflow

(backported from 2.1 commit 3529dd8bb5bafc4e02915648d5f409bd27a9cc37)

2015-04-15 16:07:08 +09:00

..

agent.h

agent: Extend cmd KEYINFO to return data from sshcontrol.

2013-08-08 21:44:52 +02:00

cache.c

Fix bug #1053

2009-05-15 11:16:28 +00:00

call-pinentry.c

agent: kill pinentry by SIGINT, fixing a bug to be killed by SIGINT.

2013-02-04 09:07:22 +09:00

call-scd.c

scd: Rename 'keypad' to 'pinpad'.

2013-02-08 09:20:43 +09:00

ChangeLog-2011

Generate the ChangeLog from commit logs.

2011-12-02 19:28:02 +01:00

command-ssh.c

agent: Fix length test in sshcontrol parser.

2015-04-15 16:07:08 +09:00

command.c

agent: Extend cmd KEYINFO to return data from sshcontrol.

2013-08-08 21:44:52 +02:00

divert-scd.c

scd: Rename 'keypad' to 'pinpad'.

2013-02-08 09:20:43 +09:00

findkey.c

agent: Fix wrong use of gcry_sexp_build_array

2012-11-02 16:32:15 +01:00

genkey.c

Fix typos spotted during translations

2012-08-24 10:34:43 +02:00

gpg-agent-w32info.rc

w32: Add icons and version information.

2013-05-07 21:17:04 +02:00

gpg-agent.c

Remove thread callbacks for libgcrypt >= 1.6.

2014-06-24 10:56:19 +02:00

keyformat.txt

Add more passphrase policy rules.

2007-08-28 17:48:13 +00:00

learncard.c

app-openpgp changes

2009-06-09 19:11:28 +00:00

Makefile.am

Improve configure option --with-libgpg-error-prefix

2014-06-24 10:36:15 +02:00

minip12.c

sm: Avoid double-free on iconv failure

2015-01-13 10:52:22 +09:00

minip12.h

Changed to GPLv3.

2007-07-04 19:49:40 +00:00

pkdecrypt.c

Fix bug #1053

2009-05-15 11:16:28 +00:00

pksign.c

Fix bug #1053

2009-05-15 11:16:28 +00:00

preset-passphrase.c

w32: Almost everywhere include winsock2.h before windows.h.

2013-04-23 18:06:46 +02:00

protect-tool.c

agent: Let gpg-protect-tool pass envvars to pinentry.

2014-06-25 17:19:08 +02:00

protect.c

ssh: Support ECDSA keys.

2013-07-01 20:31:16 +02:00

t-protect.c

ssh: Support ECDSA keys.

2013-07-01 20:31:16 +02:00

trans.c

Changed to GPLv3.

2007-07-04 19:49:40 +00:00

trustlist.c

agent: Make --allow-mark-trusted the default.

2013-07-03 15:20:25 +02:00

w32main.c

Fixed segv in gpg-agent (command marktrusted).

2008-05-27 12:03:50 +00:00

w32main.h

Changed to GPLv3.

2007-07-04 19:49:40 +00:00