File libssh2_org-CVE-2019-3863.patch of Package libssh2_org

Overview Repositories Revisions Requests Users Attributes Meta

File libssh2_org-CVE-2019-3863.patch of Package libssh2_org (Revision a4cdaa0e7bfb9e6da149b63861008087)

Currently displaying revision a4cdaa0e7bfb9e6da149b63861008087 , Show latest

Index: libssh2-1.4.3/src/userauth.c
===================================================================
--- libssh2-1.4.3.orig/src/userauth.c
+++ libssh2-1.4.3/src/userauth.c
@@ -1601,8 +1601,17 @@ userauth_keyboard_interactive(LIBSSH2_SE
 
             for(i = 0; i != session->userauth_kybd_num_prompts; ++i) {
                 /* string    response[1] (ISO-10646 UTF-8) */
-                session->userauth_kybd_packet_len +=
-                    4 + session->userauth_kybd_responses[i].length;
+                 if(session->userauth_kybd_responses[i].length <=
+                   (SIZE_MAX - 4 - session->userauth_kybd_packet_len) ) {
+                    session->userauth_kybd_packet_len +=
+                        4 + session->userauth_kybd_responses[i].length;
+                }
+                else {
+                    _libssh2_error(session, LIBSSH2_ERROR_ALLOC,
+                                   "Unable to allocate memory for keyboard-"
+                                   "interactive response packet");
+                    goto cleanup;
+                }
             }
 
             /* A new userauth_kybd_data area is to be allocated, free the

Places

File libssh2_org-CVE-2019-3863.patch of Package libssh2_org (Revision a4cdaa0e7bfb9e6da149b63861008087)

Places