129218 – gnupg core dump on empty trust packets

Bug 129218 - gnupg core dump on empty trust packets

Summary: gnupg core dump on empty trust packets

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	New packages (show other bugs)
Hardware:	All Linux

Importance:	High normal
Assignee:	Crypto team [DISABLED]

URL:	http://bugs.gnupg.org/cgi-bin/gnatswe...
Whiteboard:
Keywords:

Depends on:
Blocks:

Reported:	2006-04-08 03:06 UTC by Tavis Ormandy (RETIRED)
Modified:	2006-04-22 22:18 UTC (History)
CC List:	0 users

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Tavis Ormandy (RETIRED) gentoo-dev

2006-04-08 03:06:13 UTC

empty trust packets cause gpg to dump core, already fixed in upstream cvs

perl -e 'print "\x98\x0c\x02","\x00"x"11","\xb4\x00\xcc\x00"' | gpg

patch here:

http://cvs.gnupg.org/cgi-bin/viewcvs.cgi/trunk/g10/mainproc.c?rev=4096&r1=4077&r2=4096&makepatch=1&diff_format=u

(also affects 1.4.3)

Comment 1 Daniel Black (RETIRED) gentoo-dev

2006-04-22 22:18:44 UTC

Thanks Tavis!

Applied to 1.4.2.1, 1.4.2.2 and 1.4.3. All pass the test without SEGFAULTing.