~ubuntu-branches/ubuntu/trusty/gnupg2/trusty-proposed

« back to all changes in this revision

Viewing changes to g10/keygen.c

  • Committer: Package Import Robot
  • Author(s): Marc Deslauriers
  • Date: 2013-10-07 15:38:03 UTC
  • mfrom: (18.1.4 saucy)
  • Revision ID: package-import@ubuntu.com-20131007153803-9z5dpnkp34igz6ax
Tags: 2.0.20-1ubuntu3
* SECURITY UPDATE: incorrect no-usage-permitted flag handling
  - debian/patches/CVE-2013-4351.patch: correctly handle empty key flags
    in g10/getkey.c, g10/keygen.c, include/cipher.h.
  - CVE-2013-4351
* SECURITY UPDATE: denial of service via infinite recursion
  - debian/patches/CVE-2013-4402.patch: set limits on number of filters
    and nested packets in common/iobuf.c, g10/mainproc.c.
  - CVE-2013-4402

Show diffs side-by-side

added added

removed removed

Lines of Context:
219
219
    if (use & PUBKEY_USAGE_AUTH)
220
220
        buf[0] |= 0x20;
221
221
 
222
 
    if (!buf[0]) 
223
 
        return;
224
 
 
225
222
    build_sig_subpkt (sig, SIGSUBPKT_KEY_FLAGS, buf, 1);
226
223
}
227
224