From 8ae0fed7e08adef61961cfa254743303dd0ed642 Mon Sep 17 00:00:00 2001 From: Aurelien David Date: Thu, 11 Apr 2019 14:54:53 +0200 Subject: [PATCH] [PATCH] fix buffer overrun in gf_bin128_parse closes #1204 closes #1205 Gbp-Pq: Name CVE-2019-11222.patch --- src/utils/os_divers.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/src/utils/os_divers.c b/src/utils/os_divers.c index d44f095..1411fe9 100644 --- a/src/utils/os_divers.c +++ b/src/utils/os_divers.c @@ -1969,6 +1969,11 @@ GF_Err gf_bin128_parse(char *string, bin128 value) sscanf(szV, "%x", &v); value[i] = v; i++; + if (i > 15) { + // force error check below + i++; + break; + } } } if (i != 16) { -- 2.30.2