Ingo Franzki 634095aa24 libseckey: Fix possible out of bounds read in sk_ep11_parse_der_tag() ...

For long-length field encoding, check if the number of length bytes
exceed the data size.

Assisted-by: IBM Bob:2.0.0
Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com>
Reviewed-by: Finn Callies <fcallies@linux.ibm.com>
Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>

2026-07-20 15:25:58 +02:00

..

Makefile

Use EVP_PKEY_id() for OpenSSL 1.1 detection

2026-06-22 16:43:02 +02:00

sk_cca.c

libseckey: Fix possible endless loop for malformed CCA key tokens

2026-07-20 15:25:58 +02:00

sk_ep11.c

libseckey: Fix possible out of bounds read in sk_ep11_parse_der_tag()

2026-07-20 15:25:58 +02:00

sk_openssl.c

libseckey: Add a secure key library

2021-07-07 13:53:06 +02:00

sk_pkeymeth.c

libseckey: Fix error checking in SK_OPENSSL_init() (OpenSSL 1.1.1 only)

2026-07-20 15:25:58 +02:00

sk_provider.c

libseckey: Use OSSL_FUNC_keymgmt_im/export_types_ex functions

2023-03-17 10:56:11 +01:00

sk_utilities.c

libseckey: Protect from symlink-following attacks

2026-07-20 15:25:58 +02:00