[Opensc-commits] [OpenSC/OpenSC] 3b2452: pkcs11-tool: Avoid memory overrun

[Mario H. <no...@gi...>]

  Branch: refs/heads/master
  Home:   https://github.com/OpenSC/OpenSC
  Commit: 3b2452e4f818a83e6a59afe58be7d188dbb2bc4c
      https://github.com/OpenSC/OpenSC/commit/3b2452e4f818a83e6a59afe58be7d188dbb2bc4c
  Author: Jakub Jelen <jj...@re...>
  Date:   2025-09-15 (Mon, 15 Sep 2025)

  Changed paths:
    M src/tools/pkcs11-tool.c

  Log Message:
  -----------
  pkcs11-tool: Avoid memory overrun

Thanks coverity!

CID 487665

Signed-off-by: Jakub Jelen <jj...@re...>


  Commit: e0b231d1ce7cfc32ab5656c4d0ee1ac8868951bb
      https://github.com/OpenSC/OpenSC/commit/e0b231d1ce7cfc32ab5656c4d0ee1ac8868951bb
  Author: Jakub Jelen <jj...@re...>
  Date:   2025-09-15 (Mon, 15 Sep 2025)

  Changed paths:
    M src/tools/pkcs11_uri.c

  Log Message:
  -----------
  pkcs11_uri: Avoid potential NULL dereference

The issue reported by coverity is false positive, but we can sanitize
inputs to the parse_string function to make it more clear to the analyzer.

CID 487664

Signed-off-by: Jakub Jelen <jj...@re...>


  Commit: c170808934512a0a07050889d4d417e7891764c2
      https://github.com/OpenSC/OpenSC/commit/c170808934512a0a07050889d4d417e7891764c2
  Author: Jakub Jelen <jj...@re...>
  Date:   2025-09-15 (Mon, 15 Sep 2025)

  Changed paths:
    M src/tests/fuzzing/fuzz_pkcs11_uri.c

  Log Message:
  -----------
  fuzzer: Avoid memory leak

CID 487663

Signed-off-by: Jakub Jelen <jj...@re...>


  Commit: e5db4d502d4a7bf726c2ee8923879e7cc15cc2f6
      https://github.com/OpenSC/OpenSC/commit/e5db4d502d4a7bf726c2ee8923879e7cc15cc2f6
  Author: Jakub Jelen <jj...@re...>
  Date:   2025-09-15 (Mon, 15 Sep 2025)

  Changed paths:
    M src/libopensc/card-dtrust.c

  Log Message:
  -----------
  dtrust: Fix possible NULL pointer dereference

If I understand the code, right, it should be the can_value, rather
than the can_env here.

Thanks coverity.

CID 487696

Signed-off-by: Jakub Jelen <jj...@re...>


  Commit: 92fe011a9cc5e03a1c9a2127d33b603e6d24907e
      https://github.com/OpenSC/OpenSC/commit/92fe011a9cc5e03a1c9a2127d33b603e6d24907e
  Author: Mario Haustein <mar...@hr...>
  Date:   2025-09-15 (Mon, 15 Sep 2025)

  Changed paths:
    M src/tools/dtrust-tool.c

  Log Message:
  -----------
  dtrust: Fix NULL pointer dereference


Compare: https://github.com/OpenSC/OpenSC/compare/79f5059135a5...92fe011a9cc5

To unsubscribe from these emails, change your notification settings at https://github.com/OpenSC/OpenSC/settings/notifications