Ingo Franzki 220f51fb98 libseckey: Fix integer underflow for malformed SPKIs ...

When the BER encoded BITRSTRING field has a zero length, then skipping
the unused-bits byte that a BITRSTING normally contains will cause a
underflow and thus may cause an out of bounds read by the caller of
sk_ep11_parse_spki().

Assisted-by: IBM Bob:2.0.0
Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com>
Reviewed-by: Finn Callies <fcallies@linux.ibm.com>
Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>

2026-07-20 15:25:59 +02:00

..

Makefile

Use EVP_PKEY_id() for OpenSSL 1.1 detection

2026-06-22 16:43:02 +02:00

sk_cca.c

libseckey: Fix length check in sk_cca_get_public_from_rsa_key()

2026-07-20 15:25:59 +02:00

sk_ep11.c

libseckey: Fix integer underflow for malformed SPKIs

2026-07-20 15:25:59 +02:00

sk_openssl.c

libseckey: Add a secure key library

2021-07-07 13:53:06 +02:00

sk_pkeymeth.c

libseckey: FIx memory leak in error path (OpenSSL 1.1.1 only)

2026-07-20 15:25:59 +02:00

sk_provider.c

libseckey: Use OSSL_FUNC_keymgmt_im/export_types_ex functions

2023-03-17 10:56:11 +01:00

sk_utilities.c

libseckey: Protect from symlink-following attacks

2026-07-20 15:25:58 +02:00