Re: [PATCH] Fix NULL dereference in show_sig_summary().
"Kevin J. McCarthy" <[email protected]>
| Newsgroups | gmane.mail.mutt.devel |
|---|---|
| Message-ID | <aeWZRfxGG3WJo5NC@qinghai> |
On Sun, Apr 19, 2026 at 08:45:20AM +0200, Alejandro Colomar via Mutt-dev wrote: >On 2026-04-19T13:48:35+0800, Kevin J. McCarthy wrote: >> Inside show_one_sig_status(), if the error code is GPG_ERR_NO_PUBKEY, >> key is NULL. However, show_sig_summary() doesn't check for a NULL key >> before dereferencing for the "key expired" case. >> >> Thanks to [email protected] for the security report. >> >> Thanks to Alejandro Colomar for his review and suggestion to keep the >> ternary operator. > >Reviewed-by: Alejandro Colomar <[email protected]> Pushed to stable and merged to master. -- Kevin J. McCarthy GPG Fingerprint: 8975 A9B3 3AA3 7910 385C 5308 ADEF 7684 8031 6BDA
signature.asc
(application/pgp-signature, 833 B)
-----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEiXWpszqjeRA4XFMIre92hIAxa9oFAmnlmUUACgkQre92hIAx a9pj+RAA8XclIfd4gAcHTO55vj42j7kl0nAZR9C/ErHfFrd84lTCX1b2tuFIFSf3 D3SKpO90qYwciernhMfk67pZIEUVs1OhDwQRHIP3Ut0y8kyznl3KvCxaDJaenHeb MVZMlOsRCSdG8gtg9yZviaMoDQJSf9QsS7u/9XvtIpLl9c1enMUBLkRxBI8144QU oE8TEA4bZnkTbDRr39RFolWfhY1A4yd86COx8IqtRyz8rMiLcQf+LnBYMrlcyDHy rb/jlyhuysaoHaB9k2zYd5PKGIvnaJNQzXXqtTmGXbTm0llZeMViCgoparkQBb9D H3VphQHibyCuMhyDC7MOMP7t6bh7eLKsABAFQw2EPV5QtZ2y1MhprQnFihQtLK2u K3KPR3Hc9yYPfKIpyEDBxoHyuCFWgvgi4lmG4EYiXy6A1RBUL0K7GsOStYInskrE QVLJ8TlFE2QO+SDQVT06mCAcXG/L8KbvoeBPMJiye6sZKQaEmm/u3w71Vj+WPJtG 8L3aAsZDdTbJQaLRze5v5h6Xm1W2cLND4dMfhTI9Z9UCUGPCBJ+o18Yvwjbj+jI5 4D0oUwqMo6RTwAE2WO0g4KVbo5Q+ZXx/43hju8Fo9mdkhx6WxnKtjucuTRJacPqL joPKEo6FrQ6vu5djZ0AYvLXedFf58SlgvwTgOQVCM4iv1m8ISQw= =IQ2m -----END PGP SIGNATURE-----