Commit df14e502 authored by Dr. Stephen Henson's avatar Dr. Stephen Henson
Browse files

Sanity check PVK file fields. 



PVK files with abnormally large length or salt fields can cause an
integer overflow which can result in an OOB read and heap corruption.
However this is an rarely used format and private key files do not
normally come from untrusted sources the security implications not
significant.

Fix by limiting PVK length field to 100K and salt to 10K: these should be
more than enough to cover any files encountered in practice.

Issue reported by Guido Vranken.

Reviewed-by: default avatarRich Salz <rsalz@openssl.org>
(cherry picked from commit 5f57abe2)
parent dd851821

crypto/pem/pvkfmt.c

+7 −0
Original line number Diff line number Diff line
@@ -131,6 +131,10 @@ static int read_lebn(const unsigned char **in, unsigned int nbyte, BIGNUM **r) 
# define MS_PVKMAGIC             0xb0b5f11eL

/* Salt length for PVK files */

# define PVK_SALTLEN             0x10

/* Maximum length in PVK header */

# define PVK_MAX_KEYLEN          102400

/* Maximum salt length */

# define PVK_MAX_SALTLEN         10240



static EVP_PKEY *b2i_rsa(const unsigned char **in, unsigned int length,

                         unsigned int bitlen, int ispub);
@@ -644,6 +648,9 @@ static int do_PVK_header(const unsigned char **in, unsigned int length, 
    *psaltlen = read_ledword(&p);

    *pkeylen = read_ledword(&p);



    if (*pkeylen > PVK_MAX_KEYLEN || *psaltlen > PVK_MAX_SALTLEN)

        return 0;



    if (is_encrypted && !*psaltlen) {

        PEMerr(PEM_F_DO_PVK_HEADER, PEM_R_INCONSISTENT_HEADER);

        return 0;