Ingo Franzki 7d56dde24a libkmipclient: Fix size underflow when padding bytes exceed remaining size ...

When decoding a value that is exactly at the boundary of the available size
(i.e., *size == value_len), and the value length is not a multiple of the
TTLV block length, then *size wraps to a huge value when the pad_len is
subtracted.

Assisted-by: IBM Bob:2.0.0
Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com>
Reviewed-by: Finn Callies <fcallies@linux.ibm.com>
Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>

2026-07-20 15:25:58 +02:00

..

attribute.c

libkmipclient: Fix findings from static code checker

2025-05-21 15:50:31 +02:00

https.c

libkmipclient: Limit the nesting level of KMIP STRUCTURE recursion

2026-07-20 15:25:58 +02:00

json.c

libkmipclient: Limit the nesting level of KMIP STRUCTURE recursion

2026-07-20 15:25:58 +02:00

key.c

libkmipclient: Add KMIP client shared library

2021-07-07 13:53:06 +02:00

kmip.c

libkmipclient: Protect from symlink-following attacks

2026-07-20 15:25:58 +02:00

kmip.h

libkmipclient: Limit the nesting level of KMIP STRUCTURE recursion

2026-07-20 15:25:58 +02:00

libkmipclient.map

libkmipclient: Add KMIP client shared library

2021-07-07 13:53:06 +02:00

Makefile

Use EVP_PKEY_id() for OpenSSL 1.1 detection

2026-06-22 16:43:02 +02:00

names.c

libkmipclient: Add KMIP client shared library

2021-07-07 13:53:06 +02:00

names.h

libkmipclient: Add KMIP client shared library

2021-07-07 13:53:06 +02:00

request.c

libkmipclient: Fix findings from static code checker

2025-05-21 15:50:31 +02:00

response.c

libkmipclient: Fix findings from static code checker

2025-05-21 15:50:31 +02:00

tls.c

libkmipclient: Limit the nesting level of KMIP STRUCTURE recursion

2026-07-20 15:25:58 +02:00

ttlv.c

libkmipclient: Fix size underflow when padding bytes exceed remaining size

2026-07-20 15:25:58 +02:00

utils.c

libkmipclient: Fix integer overflow in kmip_format_hex()

2026-07-20 15:25:58 +02:00

utils.h

libkmipclient: Fix integer overflow in kmip_format_hex()

2026-07-20 15:25:58 +02:00

xml.c

libkmipclient: Limit the nesting level of KMIP STRUCTURE recursion

2026-07-20 15:25:58 +02:00