Ingo Franzki c006800bd5 libseckey: Fix length check of SPKI ...

Field spki_size is defined as size_t, so it can never be negative.
Before the check, sk_ep11_valid_ep11_blob() ensures that hdr->len is
never greater than key_token_length, so the subtraction can never
overflow the result, but it still can be zero.

Assisted-by: IBM Bob:2.0.0
Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com>
Reviewed-by: Finn Callies <fcallies@linux.ibm.com>
Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>

2026-07-20 15:25:59 +02:00

..

Makefile

Use EVP_PKEY_id() for OpenSSL 1.1 detection

2026-06-22 16:43:02 +02:00

sk_cca.c

libseckey: Fix possible endless loop for malformed CCA key tokens

2026-07-20 15:25:58 +02:00

sk_ep11.c

libseckey: Fix length check of SPKI

2026-07-20 15:25:59 +02:00

sk_openssl.c

libseckey: Add a secure key library

2021-07-07 13:53:06 +02:00

sk_pkeymeth.c

libseckey: Fix error checking in SK_OPENSSL_init() (OpenSSL 1.1.1 only)

2026-07-20 15:25:58 +02:00

sk_provider.c

libseckey: Use OSSL_FUNC_keymgmt_im/export_types_ex functions

2023-03-17 10:56:11 +01:00

sk_utilities.c

libseckey: Protect from symlink-following attacks

2026-07-20 15:25:58 +02:00