Werner Koch
b4ec909186
scd: Fix possible NULL deref in apdu.c
* scd/apdu.c (control_pcsc_direct): Take care of BUFLEN being NULL.
(control_pcsc_wrapped): Ditto.
--
pcsc_vendor_specific_init calls the above with BUFFER and BUFLEN as
NULL.
Reported by Stack 0.3:
bug: anti-dce
model: |
control_pcsc.exit77:
%retval.0.i.i76 = phi i32 [ %rc.0.i.i.i73, \
%pcsc_error_to_sw.exit.i.i74 ], [ 0, %if.end.i.i75 ]
%tobool198 = icmp ne i32 %retval.0.i.i76, 0, !dbg !728
br i1 %tobool198, label %if.then199, label %if.end200, !dbg !728
stack:
- /home/wk/s/gnupg/scd/apdu.c:1882:0
ncore: 1
core:
- /home/wk/s/gnupg/scd/apdu.c:1309:0
- buffer overflow
(backported from 2.1 commit ef0a3abf7305133d071bf1a94a7f461082f9a9aa)
2015-04-15 16:06:06 +09:00
..
2015-04-15 16:06:06 +09:00
2013-02-08 09:20:43 +09:00
2009-05-08 15:07:45 +00:00
2013-02-08 09:20:43 +09:00
2009-09-03 10:57:23 +00:00
2009-05-08 15:07:45 +00:00
2013-02-08 09:20:43 +09:00
2015-02-12 20:34:44 +01:00
2009-12-21 16:19:09 +00:00
2014-03-12 15:03:57 +01:00
2009-02-09 10:25:41 +00:00
2007-07-04 19:49:40 +00:00
2007-07-04 19:49:40 +00:00
2007-07-04 19:49:40 +00:00
2008-11-03 10:54:18 +00:00
2007-07-04 19:49:40 +00:00
2015-02-12 20:34:44 +01:00
2013-02-08 09:20:43 +09:00
2011-12-02 19:28:02 +01:00
2015-01-13 10:52:22 +09:00
2013-02-08 09:20:43 +09:00
2013-02-08 09:20:43 +09:00
2014-06-24 10:36:15 +02:00
2015-02-12 20:34:44 +01:00
2013-02-05 14:09:47 +09:00
2013-05-07 21:17:04 +02:00
2014-06-24 10:56:19 +02:00
2013-02-08 09:20:43 +09:00