exchange

commit 75cf758964c6c326ad3d9f2a10939f29e2fc3428
parent a026458699637ec56fe9cd67c44ecfba7780185d
Author: Christian Grothoff <christian@grothoff.org>
Date:   Sun, 12 Jul 2026 21:52:39 +0200

add length check before length decode

Diffstat:
M
src/util/crypto_contract.c
 | 
6
++++++

1 file changed, 6 insertions(+), 0 deletions(-)
diff --git a/src/util/crypto_contract.c b/src/util/crypto_contract.c
@@ -615,6 +615,12 @@ TALER_CRYPTO_kyc_attributes_decrypt (
     GNUNET_break_op (0);
     return NULL;
   }
+  if (hdr_size < sizeof (uint32_t))
+  {
+    GNUNET_break_op (0);
+    GNUNET_free (xhdr);
+    return NULL;
+  }
   GNUNET_memcpy (&belen,
                  xhdr,
                  sizeof (belen));