[gmime] Added warning to g_mime_crypto_context_decrypt() about a possible DoS



commit f6d905bd3f34eee7c6eaadd1538ebc93ead9c1ac
Author: Jeffrey Stedfast <fejj gnome org>
Date:   Mon Nov 4 08:55:34 2013 -0500

    Added warning to g_mime_crypto_context_decrypt() about a possible DoS

 gmime/gmime-crypto-context.c |    4 ++++
 1 files changed, 4 insertions(+), 0 deletions(-)
---
diff --git a/gmime/gmime-crypto-context.c b/gmime/gmime-crypto-context.c
index 2a1fa34..e37123a 100644
--- a/gmime/gmime-crypto-context.c
+++ b/gmime/gmime-crypto-context.c
@@ -440,6 +440,10 @@ crypto_decrypt (GMimeCryptoContext *ctx, GMimeStream *istream,
  * certificates, one for each recipient, that the original encrypted stream
  * was encrypted to.
  *
+ * Note: It *may* be possible to maliciously design an encrypted stream such
+ * that recursively decrypting it will result in ane endless loop, causing
+ * a denial of service attack on your application.
+ *
  * Returns: (transfer full): a #GMimeDecryptResult on success or %NULL
  * on error.
  **/


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]