[gmime] Added warning to g_mime_crypto_context_decrypt() about a possible DoS
- From: Jeffrey Stedfast <fejj src gnome org>
- To: commits-list gnome org
- Cc:
- Subject: [gmime] Added warning to g_mime_crypto_context_decrypt() about a possible DoS
- Date: Mon, 4 Nov 2013 13:56:11 +0000 (UTC)
commit f6d905bd3f34eee7c6eaadd1538ebc93ead9c1ac
Author: Jeffrey Stedfast <fejj gnome org>
Date: Mon Nov 4 08:55:34 2013 -0500
Added warning to g_mime_crypto_context_decrypt() about a possible DoS
gmime/gmime-crypto-context.c | 4 ++++
1 files changed, 4 insertions(+), 0 deletions(-)
---
diff --git a/gmime/gmime-crypto-context.c b/gmime/gmime-crypto-context.c
index 2a1fa34..e37123a 100644
--- a/gmime/gmime-crypto-context.c
+++ b/gmime/gmime-crypto-context.c
@@ -440,6 +440,10 @@ crypto_decrypt (GMimeCryptoContext *ctx, GMimeStream *istream,
* certificates, one for each recipient, that the original encrypted stream
* was encrypted to.
*
+ * Note: It *may* be possible to maliciously design an encrypted stream such
+ * that recursively decrypting it will result in ane endless loop, causing
+ * a denial of service attack on your application.
+ *
* Returns: (transfer full): a #GMimeDecryptResult on success or %NULL
* on error.
**/
[
Date Prev][
Date Next] [
Thread Prev][
Thread Next]
[
Thread Index]
[
Date Index]
[
Author Index]