Ingo Franzki d7648875cc libkmipclient: Fix signed-integer overflow in TTLV tag/length byte-shift ...

In C, operands of '<<' are subject to integer promotion. So the unsigned
char array elements are promoted to signed int and then shifted producing
signed overflow — undefined behaviour in C.

Fix this by first casting to uint32_t and then shift.

Assisted-by: IBM Bob:2.0.0
Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com>
Reviewed-by: Finn Callies <fcallies@linux.ibm.com>
Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>

2026-07-20 15:25:58 +02:00

..

attribute.c

libkmipclient: Fix findings from static code checker

2025-05-21 15:50:31 +02:00

https.c

libkmipclient: Limit the nesting level of KMIP STRUCTURE recursion

2026-07-20 15:25:58 +02:00

json.c

libkmipclient: Limit the nesting level of KMIP STRUCTURE recursion

2026-07-20 15:25:58 +02:00

key.c

libkmipclient: Add KMIP client shared library

2021-07-07 13:53:06 +02:00

kmip.c

libkmipclient: Protect from symlink-following attacks

2026-07-20 15:25:58 +02:00

kmip.h

libkmipclient: Limit the nesting level of KMIP STRUCTURE recursion

2026-07-20 15:25:58 +02:00

libkmipclient.map

libkmipclient: Add KMIP client shared library

2021-07-07 13:53:06 +02:00

Makefile

Use EVP_PKEY_id() for OpenSSL 1.1 detection

2026-06-22 16:43:02 +02:00

names.c

libkmipclient: Add KMIP client shared library

2021-07-07 13:53:06 +02:00

names.h

libkmipclient: Add KMIP client shared library

2021-07-07 13:53:06 +02:00

request.c

libkmipclient: Fix findings from static code checker

2025-05-21 15:50:31 +02:00

response.c

libkmipclient: Fix findings from static code checker

2025-05-21 15:50:31 +02:00

tls.c

libkmipclient: Limit the nesting level of KMIP STRUCTURE recursion

2026-07-20 15:25:58 +02:00

ttlv.c

libkmipclient: Fix signed-integer overflow in TTLV tag/length byte-shift

2026-07-20 15:25:58 +02:00

utils.c

libkmipclient: Protect from symlink-following attacks

2026-07-20 15:25:58 +02:00

utils.h

libkmipclient: Protect from symlink-following attacks

2026-07-20 15:25:58 +02:00

xml.c

libkmipclient: Limit the nesting level of KMIP STRUCTURE recursion

2026-07-20 15:25:58 +02:00