Ingo Franzki 7fd2421a2c libkmipclient: Detect possible length overflow situations ...

A deeply nested or pathologically large KMIP node tree crafted by a
malicious server can wrap the length calculation around to a small
value. Detect this and return an error in this case.

Assisted-by: IBM Bob:2.0.0
Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com>
Reviewed-by: Finn Callies <fcallies@linux.ibm.com>
Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>

2026-07-20 15:25:58 +02:00

..

attribute.c

libkmipclient: Fix findings from static code checker

2025-05-21 15:50:31 +02:00

https.c

libkmipclient: Limit the nesting level of KMIP STRUCTURE recursion

2026-07-20 15:25:58 +02:00

json.c

libkmipclient: Fix parsing of optional 'name' element

2026-07-20 15:25:58 +02:00

key.c

libkmipclient: Fix invalid return of -1 for an unsigned int

2026-07-20 15:25:58 +02:00

kmip.c

libkmipclient: Fix error checking in kmip_node_clone()

2026-07-20 15:25:58 +02:00

kmip.h

libkmipclient: Limit the nesting level of KMIP STRUCTURE recursion

2026-07-20 15:25:58 +02:00

libkmipclient.map

libkmipclient: Add KMIP client shared library

2021-07-07 13:53:06 +02:00

Makefile

Use EVP_PKEY_id() for OpenSSL 1.1 detection

2026-06-22 16:43:02 +02:00

names.c

libkmipclient: Add KMIP client shared library

2021-07-07 13:53:06 +02:00

names.h

libkmipclient: Add KMIP client shared library

2021-07-07 13:53:06 +02:00

request.c

libkmipclient: Fix findings from static code checker

2025-05-21 15:50:31 +02:00

response.c

libkmipclient: Fix invalid return of -1 for an unsigned int

2026-07-20 15:25:58 +02:00

tls.c

libkmipclient: Limit the nesting level of KMIP STRUCTURE recursion

2026-07-20 15:25:58 +02:00

ttlv.c

libkmipclient: Detect possible length overflow situations

2026-07-20 15:25:58 +02:00

utils.c

libkmipclient: Detect possible length overflow situations

2026-07-20 15:25:58 +02:00

utils.h

libkmipclient: Fix integer overflow in kmip_format_hex()

2026-07-20 15:25:58 +02:00

xml.c

libkmipclient: Limit the nesting level of KMIP STRUCTURE recursion

2026-07-20 15:25:58 +02:00