[Opensc-commits] [OpenSC/OpenSC] e6593b: Check buffer size before dereferencing

[Veronika H. <no...@gi...>]

  Branch: refs/heads/master
  Home:   https://github.com/OpenSC/OpenSC
  Commit: e6593b237eea851072e0d545795ee23ec0b4b524
      https://github.com/OpenSC/OpenSC/commit/e6593b237eea851072e0d545795ee23ec0b4b524
  Author: Veronika Hanulikova <xha...@fi...>
  Date:   2022-11-15 (Tue, 15 Nov 2022)

  Changed paths:
    M src/libopensc/card-authentic.c

  Log Message:
  -----------
  Check buffer size before dereferencing

Thanks OSS-Fuzz
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52662


  Commit: 2e5ead9d2e3776bd8c7e24ccf1695d062f7c3d14
      https://github.com/OpenSC/OpenSC/commit/2e5ead9d2e3776bd8c7e24ccf1695d062f7c3d14
  Author: Veronika Hanulikova <xha...@fi...>
  Date:   2022-11-15 (Tue, 15 Nov 2022)

  Changed paths:
    M src/pkcs15init/pkcs15-iasecc.c

  Log Message:
  -----------
  Free files in case of error

Thanks OSS-Fuzz
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52466


  Commit: 4ac3539c3794c050001e38e23df6c51db8bfeb9b
      https://github.com/OpenSC/OpenSC/commit/4ac3539c3794c050001e38e23df6c51db8bfeb9b
  Author: Veronika Hanulikova <xha...@fi...>
  Date:   2022-11-15 (Tue, 15 Nov 2022)

  Changed paths:
    M src/libopensc/asn1.c

  Log Message:
  -----------
  Free ASN.1 entry when object not found

Thanks OSS-Fuzz
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50483


  Commit: c8a5a5f938cadb6847bd42b6c7f1d5accd35f1a9
      https://github.com/OpenSC/OpenSC/commit/c8a5a5f938cadb6847bd42b6c7f1d5accd35f1a9
  Author: Veronika Hanulikova <xha...@fi...>
  Date:   2022-11-15 (Tue, 15 Nov 2022)

  Changed paths:
    M src/pkcs15init/profile.c

  Log Message:
  -----------
  Add check for cycles in macro expansion

When expanding macros, macro references might have a loop,
such as `a=$b b=$a`, which would not be detected. Calling
`check_macro_reference_loop` get starting macro and tries
to find the reference loop by checking the chain of the following
references.

Thanks OSS-Fuzz
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50331


  Commit: c5feda3715adb6072b538fbc3d3f1592728ac4c0
      https://github.com/OpenSC/OpenSC/commit/c5feda3715adb6072b538fbc3d3f1592728ac4c0
  Author: Veronika Hanulikova <xha...@fi...>
  Date:   2022-11-15 (Tue, 15 Nov 2022)

  Changed paths:
    M src/pkcs15init/profile.c

  Log Message:
  -----------
  Limit number of opening brackets in expression to avoid stack overflow

Thanks OSS-Fuzz
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46778


  Commit: e4cbf6a412f97c0770f612c0cd6a49ae2062204d
      https://github.com/OpenSC/OpenSC/commit/e4cbf6a412f97c0770f612c0cd6a49ae2062204d
  Author: Veronika Hanulikova <xha...@fi...>
  Date:   2022-11-15 (Tue, 15 Nov 2022)

  Changed paths:
    M src/pkcs15init/pkcs15-setcos.c

  Log Message:
  -----------
  Check valid PIN reference

Thanks OSS-Fuzz
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52991


  Commit: efd4eff7f9934134e404ffc12445da997cde6b11
      https://github.com/OpenSC/OpenSC/commit/efd4eff7f9934134e404ffc12445da997cde6b11
  Author: Veronika Hanulikova <xha...@fi...>
  Date:   2022-11-15 (Tue, 15 Nov 2022)

  Changed paths:
    M src/libopensc/card-openpgp.c

  Log Message:
  -----------
  Fix memory leak when freeing filesystem

When freeing blobs with pgp_iterate_blobs(), blobs in the tree
with a height higher than the given level will not be released.
Since blobs should form a tree without cycles, counting levels
can be omitted.

Thanks OSS-Fuzz
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52671


  Commit: d18c85add229dd79d65b2a8989cf2e366d7df388
      https://github.com/OpenSC/OpenSC/commit/d18c85add229dd79d65b2a8989cf2e366d7df388
  Author: Veronika Hanulikova <xha...@fi...>
  Date:   2022-11-15 (Tue, 15 Nov 2022)

  Changed paths:
    M src/pkcs15init/pkcs15-entersafe.c

  Log Message:
  -----------
  Check file size before allocation

Thanks OSS-Fuzz
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53090


  Commit: a6eecaa30fc0323967bbd4d82093a45c7ef2d422
      https://github.com/OpenSC/OpenSC/commit/a6eecaa30fc0323967bbd4d82093a45c7ef2d422
  Author: Veronika Hanulikova <xha...@fi...>
  Date:   2022-11-15 (Tue, 15 Nov 2022)

  Changed paths:
    M src/pkcs15init/profile.c

  Log Message:
  -----------
  Check arguments


Compare: https://github.com/OpenSC/OpenSC/compare/2ea0fe49e835...a6eecaa30fc0