mirror of
https://git.savannah.gnu.org/git/grub.git
synced 2026-10-21 14:59:34 +00:00
Import a very trimmed-down set of libtasn1 files: curl -L -O https://ftp.gnu.org/gnu/libtasn1/libtasn1-4.19.0.tar.gz tar xvzf libtasn1-4.19.0.tar.gz rm -rf grub-core/lib/libtasn1 mkdir -p grub-core/lib/libtasn1/lib mkdir -p grub-core/lib/libtasn1/tests cp libtasn1-4.19.0/{README.md,COPYING} grub-core/lib/libtasn1 cp libtasn1-4.19.0/lib/{coding.c,decoding.c,element.c,element.h,errors.c,gstr.c,gstr.h,int.h,parser_aux.c,parser_aux.h,structure.c,structure.h} grub-core/libtasn1/lib cp libtasn1-4.19.0/lib/includes/libtasn1.h grub-core/lib/libtasn1 cp libtasn1-4.19.0/tests/{CVE-2018-1000654-1_asn1_tab.h,CVE-2018-1000654-2_asn1_tab.h,CVE-2018-1000654.c,object-id-decoding.c,object-id-encoding.c,octet-string.c,reproducers.c,Test_overflow.c,Test_simple.c,Test_strings.c} grub-core/lib/libtasn1/tests rm -rf libtasn1-4.19.0* Signed-off-by: Daniel Axtens <dja@axtens.net> Signed-off-by: Gary Lin <glin@suse.com> Reviewed-by: Vladimir Serbinenko <phcoder@gmail.com> Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com> Tested-by: Stefan Berger <stefanb@linux.ibm.com>
169 lines
3.7 KiB
C
169 lines
3.7 KiB
C
/*
|
|
* Copyright (C) 2012-2022 Free Software Foundation, Inc.
|
|
*
|
|
* This file is part of LIBTASN1.
|
|
*
|
|
* This program is free software: you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation, either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
*
|
|
*/
|
|
|
|
/* Written by Simon Josefsson */
|
|
|
|
#include <stdio.h>
|
|
#include <string.h>
|
|
#include <stdlib.h>
|
|
#include <limits.h>
|
|
|
|
#include "libtasn1.h"
|
|
|
|
int
|
|
main (int argc, char **argv)
|
|
{
|
|
/* Test that values larger than long are rejected. This has worked
|
|
fine with all versions of libtasn1. */
|
|
int verbose = 0;
|
|
|
|
if (argc > 1)
|
|
verbose = 1;
|
|
|
|
{
|
|
unsigned char der[] = "\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF";
|
|
long l;
|
|
int len;
|
|
|
|
l = asn1_get_length_der (der, sizeof der, &len);
|
|
|
|
if (l == -2L)
|
|
{
|
|
if (verbose)
|
|
puts ("OK: asn1_get_length_der bignum");
|
|
}
|
|
else
|
|
{
|
|
printf ("ERROR: asn1_get_length_der bignum (l %ld len %d)\n", l, len);
|
|
return 1;
|
|
}
|
|
}
|
|
|
|
/* Test that values larger than int but smaller than long are
|
|
rejected. This limitation was introduced with libtasn1 2.12. */
|
|
if (LONG_MAX > INT_MAX)
|
|
{
|
|
unsigned long num = ((long) UINT_MAX) << 2;
|
|
unsigned char der[20];
|
|
int der_len;
|
|
long l;
|
|
int len;
|
|
|
|
asn1_length_der (num, der, &der_len);
|
|
|
|
l = asn1_get_length_der (der, der_len, &len);
|
|
|
|
if (l == -2L)
|
|
{
|
|
if (verbose)
|
|
puts ("OK: asn1_get_length_der intnum");
|
|
}
|
|
else
|
|
{
|
|
printf ("ERROR: asn1_get_length_der intnum (l %ld len %d)\n", l,
|
|
len);
|
|
return 1;
|
|
}
|
|
}
|
|
|
|
/* Test that values larger than would fit in the input string are
|
|
rejected. This problem was fixed in libtasn1 2.12. */
|
|
{
|
|
unsigned long num = 64;
|
|
unsigned char der[20];
|
|
int der_len;
|
|
long l;
|
|
int len;
|
|
|
|
asn1_length_der (num, der, &der_len);
|
|
|
|
der_len = sizeof (der);
|
|
l = asn1_get_length_der (der, der_len, &len);
|
|
|
|
if (l == -4L)
|
|
{
|
|
if (verbose)
|
|
puts ("OK: asn1_get_length_der overflow-small");
|
|
}
|
|
else
|
|
{
|
|
printf ("ERROR: asn1_get_length_der overflow-small (l %ld len %d)\n",
|
|
l, len);
|
|
return 1;
|
|
}
|
|
}
|
|
|
|
/* Test that values larger than would fit in the input string are
|
|
rejected. This problem was fixed in libtasn1 2.12. */
|
|
{
|
|
unsigned long num = 1073741824;
|
|
unsigned char der[20];
|
|
int der_len;
|
|
long l;
|
|
int len;
|
|
|
|
asn1_length_der (num, der, &der_len);
|
|
|
|
der_len = sizeof (der);
|
|
l = asn1_get_length_der (der, der_len, &len);
|
|
|
|
if (l == -4L)
|
|
{
|
|
if (verbose)
|
|
puts ("OK: asn1_get_length_der overflow-large1");
|
|
}
|
|
else
|
|
{
|
|
printf ("ERROR: asn1_get_length_der overflow-large1 (l %ld len %d)\n",
|
|
l, len);
|
|
return 1;
|
|
}
|
|
}
|
|
|
|
/* Test that values larger than would fit in the input string are
|
|
rejected. This problem was fixed in libtasn1 2.12. */
|
|
{
|
|
unsigned long num = 2147483649;
|
|
unsigned char der[20];
|
|
int der_len;
|
|
long l;
|
|
int len;
|
|
|
|
asn1_length_der (num, der, &der_len);
|
|
|
|
der_len = sizeof (der);
|
|
l = asn1_get_length_der (der, der_len, &len);
|
|
|
|
if (l == -2L)
|
|
{
|
|
if (verbose)
|
|
puts ("OK: asn1_get_length_der overflow-large2");
|
|
}
|
|
else
|
|
{
|
|
printf ("ERROR: asn1_get_length_der overflow-large2 (l %ld len %d)\n",
|
|
l, len);
|
|
return 1;
|
|
}
|
|
}
|
|
|
|
return 0;
|
|
}
|