gpg: Fix off-by-one read in the attribute subpacket parser.
authorWerner Koch <wk@gnupg.org>
Mon, 24 Nov 2014 18:38:04 +0000 (19:38 +0100)
committerWerner Koch <wk@gnupg.org>
Mon, 24 Nov 2014 18:38:04 +0000 (19:38 +0100)
commit2b4809406b6536cbb67a2282bf855710b8454dc2
treec579ab20aa0bd124b2d364a75301014797e22420
parent69767ccf4218d0dc5ef2d7e141be0f14c88fea59
gpg: Fix off-by-one read in the attribute subpacket parser.

* g10/parse-packet.c (parse_attribute_subpkts): Check that the
attribute packet is large enough for the subpacket type.
--

Reported-by: Hanno Böck
Signed-off-by: Werner Koch <wk@gnupg.org>
(backported from commit 0988764397f99db4efef1eabcdb8072d6159af76)
g10/parse-packet.c