KB Sriram 24ffb5feb3 x/crypto/openpgp: Limit packet recursion depth. ...

A carefully crafted packet can cause the packet reader to push an
infinite number of recursive packet readers. This change limits
the number of recursive parsing levels within the packet reader.

More details at:
http://mumble.net/~campbell/misc/pgp-quine
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4402

Fixes #10751

Change-Id: Ib4e102d85f6496e2c7feb5b9d7e5db45db6032df
Reviewed-on: https://go-review.googlesource.com/9843
Reviewed-by: Adam Langley <agl@golang.org>

2015-05-08 01:16:24 +00:00

..

compressed_test.go

go.crypto: initial code

2012-01-25 15:31:12 -05:00

compressed.go

go.crypto: use golang.org/x/... import paths

2014-11-10 08:50:25 +11:00

config.go

go.crypto/openpgp: fix nil Config case.

2014-11-21 14:11:46 -08:00

encrypted_key_test.go

openpgp: eliminate implicit rand.Reader and time.Now

2012-02-20 10:48:21 -05:00

encrypted_key.go

go.crypto: use golang.org/x/... import paths

2014-11-10 08:50:25 +11:00

literal.go

go.crypto: initial code

2012-01-25 15:31:12 -05:00

ocfb_test.go

openpgp/packet: move OCFB code here.

2012-02-03 15:08:12 -05:00

ocfb.go

openpgp/packet: move OCFB code here.

2012-02-03 15:08:12 -05:00

one_pass_signature.go

go.crypto: use golang.org/x/... import paths

2014-11-10 08:50:25 +11:00

opaque_test.go

openpgp/packet: Add support for V3 public keys and signatures.

2013-09-03 10:36:04 -04:00

opaque.go

go.crypto: use golang.org/x/... import paths

2014-11-10 08:50:25 +11:00

packet_test.go

go.crypto: use golang.org/x/... import paths

2014-11-10 08:50:25 +11:00

packet.go

crypto/openpgp: support public keys generated by End-to-End

2015-01-06 19:53:31 +00:00

private_key_test.go

go.crypto/openpgp: don't corrupt encrypted private key when decryption fails.

2014-10-25 11:19:44 -07:00

private_key.go

go.crypto: use golang.org/x/... import paths

2014-11-10 08:50:25 +11:00

public_key_test.go

go.crypto/openpgp: fix user id signing.

2014-05-12 11:23:48 -07:00

public_key_v3_test.go

openpgp/packet: Add support for V3 public keys and signatures.

2013-09-03 10:36:04 -04:00

public_key_v3.go

go.crypto: use golang.org/x/... import paths

2014-11-10 08:50:25 +11:00

public_key.go

go.crypto: use golang.org/x/... import paths

2014-11-10 08:50:25 +11:00

reader.go

x/crypto/openpgp: Limit packet recursion depth.

2015-05-08 01:16:24 +00:00

signature_test.go

go.crypto: initial code

2012-01-25 15:31:12 -05:00

signature_v3_test.go

go.crypto: use golang.org/x/... import paths

2014-11-10 08:50:25 +11:00

signature_v3.go

go.crypto: use golang.org/x/... import paths

2014-11-10 08:50:25 +11:00

signature.go

crypto/openpgp: support public keys generated by End-to-End

2015-01-06 19:53:31 +00:00

symmetric_key_encrypted_test.go

openpgp: eliminate implicit rand.Reader and time.Now

2012-02-20 10:48:21 -05:00

symmetric_key_encrypted.go

go.crypto/openpgp: fix nil Config case.

2014-11-21 14:11:46 -08:00

symmetrically_encrypted_test.go

go.crypto: use golang.org/x/... import paths

2014-11-10 08:50:25 +11:00

symmetrically_encrypted.go

go.crypto: use golang.org/x/... import paths

2014-11-10 08:50:25 +11:00

userattribute_test.go

go.crypto/openpgp/packet: Add user attribute packet support.

2013-08-28 11:02:21 -04:00

userattribute.go

go.crypto/openpgp/packet: Add user attribute packet support.

2013-08-28 11:02:21 -04:00

userid_test.go

go.crypto: initial code

2012-01-25 15:31:12 -05:00

userid.go

go.crypto: initial code

2012-01-25 15:31:12 -05:00