Milan Broz 9576549fee Fix bogus memory allocation if LUKS2 header size is invalid. ...

LUKS2 code read the whole header to buffer to verify checksum,
so malloc is called on unvalidated input size parameter.

This can cause out of memory or unintentional device reads.
(Header validation will fail later anyway - the size is unsupported.)

Just do not allow too small and too big allocations here and fail quickly.

Fixes: #683.

2021-11-10 13:39:54 +00:00

11 KiB

Executable File

Raw Blame History

View Raw