projects / platform / core / security / key-manager.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: fa7158d) | patch
Validate cynara sockets 97/252597/3
authorKrzysztof Jackiewicz <k.jackiewicz@samsung.com>
Mon, 25 Jan 2021 08:09:05 +0000 (09:09 +0100)
committerKrzysztof Jackiewicz <k.jackiewicz@samsung.com>
Wed, 3 Feb 2021 11:17:05 +0000 (12:17 +0100)
commitedb4576bffc91fb451c3ad9281fe41cce01e6e81
tree342858bd82e1b628b308eacb884116fd9c835ce9tree | snapshot
parentfa7158dbe74455ec0c116cf51f08bd3343f1b92bcommit | diff
Validate cynara sockets

Socket descriptors received from cynara are not validated which may lead
to:
- m_socketDescriptionVector buffer overflow/UB
- reuse of already opened descriptors for cynara
- growing m_socketDescriptionVector
- closure of descriptors used by other parts of code
- more than one cynara socket opened at the same time

Change-Id: I5c6cd521fbde2a461f24e175571b74885d163b50
src/manager/main/socket-manager.cpp diff | blob | history
src/manager/main/socket-manager.h diff | blob | history
Domain: Security / Utilities;