[Opensc-commits] [OpenSC/OpenSC] c16d4e: Check path length to prevent buffer underflow

[Veronika H. <no...@gi...>]

  Branch: refs/heads/master
  Home:   https://github.com/OpenSC/OpenSC
  Commit: c16d4e6588a19f4b85aa584174335f62efe28aaf
      https://github.com/OpenSC/OpenSC/commit/c16d4e6588a19f4b85aa584174335f62efe28aaf
  Author: Veronika Hanulikova <xha...@fi...>
  Date:   2023-03-03 (Fri, 03 Mar 2023)

  Changed paths:
    M src/pkcs15init/pkcs15-lib.c

  Log Message:
  -----------
  Check path length to prevent buffer underflow

Thanks OSS-Fuzz
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53417


  Commit: cfb35259357c210bfea461dac4ca31dae7faaa7d
      https://github.com/OpenSC/OpenSC/commit/cfb35259357c210bfea461dac4ca31dae7faaa7d
  Author: Veronika Hanulikova <xha...@fi...>
  Date:   2023-03-03 (Fri, 03 Mar 2023)

  Changed paths:
    M src/libopensc/card-coolkey.c

  Log Message:
  -----------
  Fix memory leak

Thanks OSS-Fuzz
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54082


  Commit: df5a176bfdf8c52ba89c7fef1f82f6f3b9312bc1
      https://github.com/OpenSC/OpenSC/commit/df5a176bfdf8c52ba89c7fef1f82f6f3b9312bc1
  Author: Veronika Hanulikova <xha...@fi...>
  Date:   2023-03-03 (Fri, 03 Mar 2023)

  Changed paths:
    M src/libopensc/muscle.c

  Log Message:
  -----------
  Check array bounds

Thanks OSS-Fuzz
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54312


  Commit: 475b4fce8fc4d2bbb4d42c446877820539413d85
      https://github.com/OpenSC/OpenSC/commit/475b4fce8fc4d2bbb4d42c446877820539413d85
  Author: Veronika Hanulikova <xha...@fi...>
  Date:   2023-03-03 (Fri, 03 Mar 2023)

  Changed paths:
    M src/libopensc/card-oberthur.c

  Log Message:
  -----------
  Free file in case of error

Thanks OSS-Fuzz
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54456


  Commit: 4bed31d9f88e92e1466d25c1ccd2b83f7ad805c1
      https://github.com/OpenSC/OpenSC/commit/4bed31d9f88e92e1466d25c1ccd2b83f7ad805c1
  Author: Veronika Hanulikova <xha...@fi...>
  Date:   2023-03-03 (Fri, 03 Mar 2023)

  Changed paths:
    M src/libopensc/card-starcos.c

  Log Message:
  -----------
  Fix memory leaks when reading of file fails

Free file `tmp_file` when subsequent call to
`starcos_select_fid` or `starcos_select_aid` fails.

Thanks OSS-Fuzz
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54508


  Commit: 4a4836b936150e129ce0e525aae1ed64b74caa89
      https://github.com/OpenSC/OpenSC/commit/4a4836b936150e129ce0e525aae1ed64b74caa89
  Author: Veronika Hanulikova <xha...@fi...>
  Date:   2023-03-03 (Fri, 03 Mar 2023)

  Changed paths:
    M src/libopensc/pkcs15.c

  Log Message:
  -----------
  Free allocated data when the length is 0

Allocated data has size from the selected file,
but the resulting length is given by bytes read by
sc_read_binary. This prevents memory leaks when
freeing pkcs15 object data in sc_pkcs15_free_data_info.

Thanks OSS-Fuzz
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54858


  Commit: 3cc75727177bcabf7dbcf34d0f3177e5d66ef7f3
      https://github.com/OpenSC/OpenSC/commit/3cc75727177bcabf7dbcf34d0f3177e5d66ef7f3
  Author: Veronika Hanulikova <xha...@fi...>
  Date:   2023-03-03 (Fri, 03 Mar 2023)

  Changed paths:
    M src/libopensc/card-authentic.c

  Log Message:
  -----------
  Check pointer before dereferencing

Thanks OSS-Fuzz
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55074


  Commit: bdb89174cd5441a279feea258c2792abbbe024ac
      https://github.com/OpenSC/OpenSC/commit/bdb89174cd5441a279feea258c2792abbbe024ac
  Author: Veronika Hanulikova <xha...@fi...>
  Date:   2023-03-03 (Fri, 03 Mar 2023)

  Changed paths:
    M src/pkcs15init/pkcs15-starcos.c

  Log Message:
  -----------
  Use sc_file_free() for freeing files

Thanks OSS-Fuzz
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55567


Compare: https://github.com/OpenSC/OpenSC/compare/16fdd70a7e02...bdb89174cd54