4 Commits

Author	SHA1	Message	Date
Darren Kenny	3120a6835a	libgcrypt/mpi: Fix possible NULL dereference ... The code in gcry_mpi_scan() assumes that buffer is not NULL, but there is no explicit check for that, so we add one. Fixes: CID 73757 Signed-off-by: Darren Kenny <darren.kenny@oracle.com> Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com> Patch-Name: 2021-02-security/041-libgcrypt-mpi-Fix-possible-NULL-dereference.patch	2021-02-27 14:49:30 +00:00
Darren Kenny	8d9e05f244	libgcrypt/mpi: Fix possible unintended sign extension ... The array of unsigned char gets promoted to a signed 32-bit int before it is finally promoted to a size_t. There is the possibility that this may result in the signed-bit being set for the intermediate signed 32-bit int. We should ensure that the promotion is to the correct type before we bitwise-OR the values. Fixes: CID 96697 Signed-off-by: Darren Kenny <darren.kenny@oracle.com> Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com> Patch-Name: 2021-02-security/040-libgcrypt-mpi-Fix-possible-unintended-sign-extension.patch	2021-02-27 14:49:29 +00:00
Vladimir Serbinenko	d1307d873a	Import libgcrypt 1.5.3.	2013-11-07 06:35:50 +01:00
Vladimir 'phcoder' Serbinenko	5e3b8dcbb5	Import gcrypt public-key cryptography and implement signature checking.	2013-01-11 21:32:42 +01:00