[openssl/openssl] b584ce: file_store_any2obj.c: validate blob length before ...
"'Abel Thomas' via openssl-commits" <[email protected]>
| Newsgroups | gmane.comp.encryption.openssl.cvs |
|---|---|
| Message-ID | <openssl/openssl/push/refs/heads/openssl-3.5/[email protected]> |
Branch: refs/heads/openssl-3.5
Home: https://github.com/openssl/openssl
Commit: b584ce6ec9693d40d063052e8aca976b9b0eff24
https://github.com/openssl/openssl/commit/b584ce6ec9693d40d063052e8aca976b9b0eff24
Author: Abel Thomas <[email protected]>
Date: 2026-08-21 (Fri, 21 Aug 2026)
Changed paths:
M providers/implementations/storemgmt/file_store_any2obj.c
Log Message:
-----------
file_store_any2obj.c: validate blob length before allocation
Both msblob2obj_decode() and pvk2obj_decode() computed an
attacker-influenced buffer size (from `bitlen`, or from
`saltlen + keylen`) and passed it to BUF_MEM_grow() without an
upper bound.
Resolves #31684
Fixes: f40c5f2c53b9 "PROV & STORE: Make the 'file:' store loader understand more binary formats"
Fixes: 0f5493e60b9e "storemgmt: Validate msblob length before buffer allocation"
Reviewed-by: Eugene Syromiatnikov <[email protected]>
Reviewed-by: Neil Horman <[email protected]>
Reviewed-by: Matt Caswell <[email protected]>
Merge-date: Fri Aug 21 10:10:35 2026
Merged-from: https://github.com/openssl/openssl/pull/31704
To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications
--
You received this message because you are subscribed to the Google Groups "openssl-commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-commits/openssl/openssl/push/refs/heads/openssl-3.5/e44fbf-b584ce%40github.com.