openbsd/src
1
0
Fork 0
mirror of https://github.com/openbsd/src.git synced 2026-04-30 09:06:11 +00:00
Code Issues Projects Releases Wiki Activity

rpki-client: check SPKI in TAL for trailing garbage

Browse Source 
On deserializing, ensure that the entire DER blob decoded from base64 has
been consumed.

ok job
This commit is contained in:
tb
2026-01-20 16:51:44 +00:00
parent 4b3d1f29b6
commit 5c0c839c3d
1 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
usr.sbin/rpki-client/tal.c
View File

@@ -1,4 +1,4 @@
/* $OpenBSD: tal.c,v 1.44 2026/01/20 16:49:03 tb Exp $ */
/* $OpenBSD: tal.c,v 1.45 2026/01/20 16:51:44 tb Exp $ */
/*
* Copyright (c) 2019 Kristaps Dzonsons <kristaps@bsd.lv>
*
@@ -141,6 +141,11 @@ tal_parse_buffer(const char *fn, char *buf, size_t len)
"failed public key parse", fn);
goto out;
}
if (der != tal->spki + tal->spkisz) {
warnx("%s: RFC 8630 section 2.1: subjectPublicKeyInfo: "
"%td bytes of trailing garbage", fn,
tal->spki + tal->spkisz - der);
}
rc = 1;
out:
if (rc == 0) {