mirror of
git://git.openembedded.org/meta-openembedded
synced 2026-09-28 20:12:34 +00:00
9a19b0f3cb
Details: https://nvd.nist.gov/vuln/detail/CVE-2025-66215 Backport the patches referenced by the PR[1] mentioned in the nvd. Dropped the formatting commit from the backport. [1] https://github.com/OpenSC/OpenSC/pull/3436 Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
30 lines
1.1 KiB
Diff
30 lines
1.1 KiB
Diff
From 74a72d3a82d1f49d55ef822ededec74738a30ec4 Mon Sep 17 00:00:00 2001
|
|
From: Frank Morgner <frankmorgner@gmail.com>
|
|
Date: Wed, 4 Jun 2025 00:52:13 +0200
|
|
Subject: [PATCH] fixed Stack-buffer-overflow WRITE
|
|
|
|
fixes https://issues.oss-fuzz.com/issues/421520684
|
|
|
|
(cherry picked from commit eab4d17866bb457dd86d067b304294e9f6671d52)
|
|
|
|
CVE: CVE-2025-66215
|
|
Upstream-Status: Backport [https://github.com/OpenSC/OpenSC/commit/eab4d17866bb457dd86d067b304294e9f6671d52]
|
|
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
|
|
---
|
|
src/libopensc/card-oberthur.c | 2 +-
|
|
1 file changed, 1 insertion(+), 1 deletion(-)
|
|
|
|
diff --git a/src/libopensc/card-oberthur.c b/src/libopensc/card-oberthur.c
|
|
index d5445f01a..a8aba7992 100644
|
|
--- a/src/libopensc/card-oberthur.c
|
|
+++ b/src/libopensc/card-oberthur.c
|
|
@@ -1135,7 +1135,7 @@ auth_compute_signature(struct sc_card *card, const unsigned char *in, size_t ile
|
|
apdu.lc = ilen;
|
|
apdu.le = olen > 256 ? 256 : olen;
|
|
apdu.resp = resp;
|
|
- apdu.resplen = olen;
|
|
+ apdu.resplen = SC_MAX_APDU_BUFFER_SIZE;
|
|
|
|
rv = sc_transmit_apdu(card, &apdu);
|
|
LOG_TEST_RET(card->ctx, rv, "APDU transmit failed");
|