s390-tools

mirror of https://github.com/ibm-s390-linux/s390-tools.git synced 2026-08-05 02:14:52 +00:00

Files

Ingo Franzki 3ea90a2258 libkmipclient: Fix integer overflow with large value length

Limit the value_len to not be larger than INT_MAX, because later on
BIO_read() is called with value_len and it uses the int type for
length parameter and return value.

This check also prevents the 'value_len + 1' from overflow, because
value_len is a size_t and this accepts larger values than int (even
on 32 bit architectures).

Assisted-by: IBM Bob:2.0.0
Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com>
Reviewed-by: Finn Callies <fcallies@linux.ibm.com>
Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>

2026-07-20 15:25:58 +02:00

attribute.c

libkmipclient: Fix findings from static code checker

2025-05-21 15:50:31 +02:00

https.c

libkmipclient: Limit the nesting level of KMIP STRUCTURE recursion

2026-07-20 15:25:58 +02:00

json.c

libkmipclient: Limit the nesting level of KMIP STRUCTURE recursion

2026-07-20 15:25:58 +02:00

key.c

libkmipclient: Add KMIP client shared library