security-and-privacy/gnupg
security-and-privacy/gnupg
1
0
Fork 0
mirror of git://git.gnupg.org/gnupg.git synced 2024-12-22 10:19:57 +01:00
Code Activity
gnupg/g10
History
Werner Koch e888f7af65
gpg: Fix possible double free of the card serialno. 
* g10/free-packet.c (copy_public_key): Copy fields serialno and
updateurl.
--

The PK->serialno is used to get the version of the card to decide
whether it does support other algorithms than SHA-1.  This value is
cached but no deep copy was done when calling copy_public_key.

Bug detected by importing some public keys and then importing a secret
key which led to a double free.

Signed-off-by: Werner Koch <wk@gnupg.org>
2017-07-21 17:49:10 +02:00
..
all-tests.scm
tests: Make it possible to run all tests using our infrastructure.
2017-05-11 18:12:37 +02:00
armor.c
g10, sm, dirmngr, common: Add comment for fall through.
2017-05-10 11:13:12 +09:00
build-packet.c
doc: Comment fixes and one trailing comma fix.
2017-07-20 18:13:40 +02:00
call-agent.c
gpg,sm: Check compliance of the RNG.
2017-07-17 15:53:16 +02:00
call-agent.h
agent,g10: Remove redundant SERIALNO request.
2017-03-16 14:32:51 +09:00
call-dirmngr.c
gpg: New option --key-origin.
2017-07-13 18:29:01 +02:00
call-dirmngr.h
Change all http://www.gnu.org in license notices to https://
2016-11-05 12:02:19 +01:00
card-util.c
g10: Don't limit at the frontend side for card capability.
2017-07-21 11:22:38 +09:00
ChangeLog-2011
Spelling: correct spelling of "passphrase".
2016-11-02 12:53:58 +01:00
cipher.c
Remove -I option to common.
2017-03-07 20:25:54 +09:00
compress-bz2.c
g10,tools: Fix bzlib.h include order.
2017-04-11 13:52:19 +09:00
compress.c
Remove -I option to common.
2017-03-07 20:25:54 +09:00
cpr.c
gpg: Fix typos.
2017-05-30 14:30:43 +02:00
dearmor.c
Remove -I option to common.
2017-03-07 20:25:54 +09:00
decrypt-data.c
indent,i18n: Make some new strings translatable. Wrap too long lines.
2017-06-23 12:01:20 +02:00
decrypt.c
Remove -I option to common.
2017-03-07 20:25:54 +09:00
dek.h
Change all http://www.gnu.org in license notices to https://
2016-11-05 12:02:19 +01:00
delkey.c
gpg: Pass CTRL to many more functions.
2017-03-31 20:07:20 +02:00
distsigkey.gpg
build: Update distributed signature key.
2016-12-20 10:22:05 +01:00
ecdh.c
Remove -I option to common.
2017-03-07 20:25:54 +09:00
encrypt.c
gpg,sm: Check compliance of the RNG.
2017-07-17 15:53:16 +02:00
exec.c
Remove -I option to common.
2017-03-07 20:25:54 +09:00
exec.h
Change all http://www.gnu.org in license notices to https://
2016-11-05 12:02:19 +01:00
export.c
g10: Minor fixes.
2017-04-17 09:15:13 +09:00
filter.h
Remove -I option to common.
2017-03-07 20:25:54 +09:00
free-packet.c
gpg: Fix possible double free of the card serialno.
2017-07-21 17:49:10 +02:00
getkey.c
indent: Improve readability of some comments in getkey.c
2017-07-20 18:35:46 +02:00
gpg-w32info.rc
w32: Add manifest to gpg.
2015-02-04 09:15:34 +01:00
gpg.c
gpg: New option --with-key-origin.
2017-07-20 18:13:40 +02:00
gpg.h
gpg: Avoid multiple open calls to the keybox file.
2017-03-31 21:27:16 +02:00
gpg.w32-manifest.in
w32: Add manifest to gpg.
2015-02-04 09:15:34 +01:00
gpgcompose.c
gpg: Refactor key checking and fixing.
2017-06-14 09:35:47 +02:00
gpgsql.c
Remove -I option to common.
2017-03-07 20:25:54 +09:00
gpgsql.h
Change all http://www.gnu.org in license notices to https://
2016-11-05 12:02:19 +01:00
gpgv.c
gpg: Close cached keydb handle in gpgv.
2017-06-21 15:51:10 +02:00
helptext.c
Remove -I option to common.
2017-03-07 20:25:54 +09:00
import.c
gpg: Use macros to check the signature class.
2017-07-21 17:49:08 +02:00
kbnode.c
gpg: Extend free_packet to handle a packet parser context.
2017-03-29 12:08:31 +02:00
key-check.c
gpg: Refactor key checking and fixing.
2017-06-14 09:35:47 +02:00
key-check.h
gpg: Refactor key checking and fixing.
2017-06-14 09:35:47 +02:00
keydb.c
gpg: Print more stats for the keydb and the signature cache.
2017-03-31 20:08:23 +02:00
keydb.h
gpg: New option --with-key-origin.
2017-07-20 18:13:40 +02:00
keyedit.c
gpg: Refactor key checking and fixing.
2017-06-14 09:35:47 +02:00
keyedit.h
gpg: Refactor keyedit module.
2017-06-13 15:36:47 +02:00
keygen.c
gpg: Fix error handling.
2017-06-20 10:46:52 +02:00
keyid.c
gpg: Make function mk_datestr public.
2017-07-20 18:13:40 +02:00
keylist.c
gpg: New option --with-key-origin.
2017-07-20 18:13:40 +02:00
keyring.c
gpg: Properly account for ring trust packets.
2017-05-08 14:33:11 +02:00
keyring.h
gpg: Pass CTRL to many more functions.
2017-03-31 20:07:20 +02:00
keyserver-internal.h
gpg: Pass key origin values to import functions.
2017-07-13 18:29:01 +02:00
keyserver.c
gpg: Pass key origin values to import functions.
2017-07-13 18:29:01 +02:00
main.h
gpg: Pass key origin values to import functions.
2017-07-13 18:29:01 +02:00
mainproc.c
gpg: Avoid asking by fpr and then by keyid during auto-key-retrieve.
2017-07-19 13:09:13 +02:00
Makefile.am
tofu: Compare squares instead of square roots.
2017-07-10 18:09:42 +02:00
mdfilter.c
Remove -I option to common.
2017-03-07 20:25:54 +09:00
migrate.c
Remove -I option to common.
2017-03-07 20:25:54 +09:00
misc.c
common,gpg: Move the compliance option printer.
2017-06-07 16:53:32 +02:00
openfile.c
g10: Remove skeleton options files.
2017-05-02 18:55:32 +09:00
options.h
gpg: New option --with-key-origin.
2017-07-20 18:13:40 +02:00
packet.h
doc: Comment fixes and one trailing comma fix.
2017-07-20 18:13:40 +02:00
parse-packet.c
gpg: New option --key-origin.
2017-07-13 18:29:01 +02:00
passphrase.c
gpg: Pass CTRL to many more functions.
2017-03-31 20:07:20 +02:00
photoid.c
Remove -I option to common.
2017-03-07 20:25:54 +09:00
photoid.h
Change all http://www.gnu.org in license notices to https://
2016-11-05 12:02:19 +01:00
pkclist.c
common,gpg: Move the compliance option printer.
2017-06-07 16:53:32 +02:00
pkglue.c
Remove -I option to common.
2017-03-07 20:25:54 +09:00
pkglue.h
Change all http://www.gnu.org in license notices to https://
2016-11-05 12:02:19 +01:00
plaintext.c
Remove -I option to common.
2017-03-07 20:25:54 +09:00
progress.c
Remove -I option to common.
2017-03-07 20:25:54 +09:00
pubkey-enc.c
indent,i18n: Make some new strings translatable. Wrap too long lines.
2017-06-23 12:01:20 +02:00
pubring.asc
Update copyright notices for 2017.
2017-01-23 19:16:55 +01:00
revoke.c
gpg: Pass CTRL to many more functions.
2017-03-31 20:07:20 +02:00
rmd160.c
Clean up word replication.
2017-02-21 13:11:46 -05:00
rmd160.h
Change all http://www.gnu.org in license notices to https://
2016-11-05 12:02:19 +01:00
seckey-cert.c
More change for common.
2017-03-07 20:32:09 +09:00
server.c
Remove -I option to common.
2017-03-07 20:25:54 +09:00
seskey.c
Spelling fixes in docs and comments.
2017-04-28 10:06:33 +09:00
sig-check.c
indent: Always use "_(" and not "_ (" to mark translatable strings.
2017-06-19 19:57:11 +02:00
sign.c
gpg,sm: Check compliance of the RNG.
2017-07-17 15:53:16 +02:00
skclist.c
g10: Fix default-key selection for signing, possibly by card.
2017-05-22 09:27:36 +09:00
t-keydb-get-keyblock.c
gpg: Fix actual leak and possible leaks in the packet parser.
2017-03-30 16:01:52 +02:00
t-keydb-get-keyblock.gpg
gpg: Correctly handle keyblocks followed by legacy keys.
2015-11-17 14:53:03 +01:00
t-keydb-keyring.kbx
g10: Add test for keydb as well as new testing infrastructure.
2015-09-02 15:08:57 +02:00
t-keydb.c
Change all http://www.gnu.org in license notices to https://
2016-11-05 12:02:19 +01:00
t-rmd160.c
Change all http://www.gnu.org in license notices to https://
2016-11-05 12:02:19 +01:00
t-stutter-data.asc
gpg: Add a new test.
2016-03-08 14:08:49 +01:00
t-stutter.c
g10: Stop compiler warning for t-stutter.
2017-05-10 11:13:03 +09:00
tdbdump.c
gpg: Pass CTRL to many more functions.
2017-03-31 20:07:20 +02:00
tdbio.c
Spelling fixes in docs and comments.
2017-04-28 10:06:33 +09:00
tdbio.h
gpg: Pass CTRL to many more functions.
2017-03-31 20:07:20 +02:00
test-stubs.c
gpg: Pass CTRL to many more functions.
2017-03-31 20:07:20 +02:00
test.c
tests: Locate resources and scripts relative to top source dir.
2017-04-24 14:14:05 +02:00
textfilter.c
Remove -I option to common.
2017-03-07 20:25:54 +09:00
tofu.c
tofu: Compare squares instead of square roots.
2017-07-10 18:09:42 +02:00
tofu.h
g10: Remove dead code.
2016-12-06 12:16:56 +01:00
trust.c
gpg: Pass CTRL to many more functions.
2017-03-31 20:07:20 +02:00
trustdb.c
Spelling fixes in docs and comments.
2017-04-28 10:06:33 +09:00
trustdb.h
gpg: Pass CTRL to many more functions.
2017-03-31 20:07:20 +02:00
verify.c
Spelling fixes in docs and comments.
2017-04-28 10:06:33 +09:00
zlib-riscos.h
Change all http://www.gnu.org in license notices to https://
2016-11-05 12:02:19 +01:00