[PATCH] fix buffer overrun in gf_bin128_parse

closes #1204
closes #1205

Gbp-Pq: Name CVE-2019-11222.patch

diff --git a/src/utils/os_divers.c b/src/utils/os_divers.c
index d44f09598d1aa34d3c7c4f0e8d3d6e1bd199b971..1411fe9455ac92bf89da16536954fc63ab8628a7 100644 (file)
--- a/src/utils/os_divers.c
+++ b/src/utils/os_divers.c
@@ -1969,6 +1969,11 @@ GF_Err gf_bin128_parse(char *string, bin128 value)
                        sscanf(szV, "%x", &v);
                        value[i] = v;
                        i++;
+                       if (i > 15) {
+                               // force error check below
+                               i++;
+                               break;
+                       }
                }
        }
        if (i != 16) {