Verify MPI size is within packet boundary in pgpMpiItem()
authorPanu Matilainen <pmatilai@redhat.com>
Wed, 26 Oct 2011 11:01:41 +0000 (14:01 +0300)
committerPanu Matilainen <pmatilai@redhat.com>
Wed, 26 Oct 2011 11:11:47 +0000 (14:11 +0300)
commitc1141ec3f31ce20a071e9be064baa079119637f6
treecc65d6f2f29bf023d793e102f3c3849f22232e50
parent3487544e96dba38d0991e2293d7855efb4a1aa6c
Verify MPI size is within packet boundary in pgpMpiItem()

- Malformed data can claim the MPI size to be "arbitrarily" large,
  pass packet end pointer to pgpMpiItem() and validate we have enough
  bytes in the packet to contain the MPI before copying.
rpmio/rpmpgp.c