Null ptr dereference in gpg-agent (gnupg 2.3.2)
Closed, ResolvedPublic

Assigned To
Authored By
brad.kaiser
Aug 30 2021, 2:29 PM

Description

There is a fairly obvious null pointer dereference in gpg-agent, file agent/command.c, line 1958. (Variable "pi" is null.)

This (at least on my machine) breaks symmetric decryption.

The bug is obvious, but the fix is less obvious. I tried lifting the memory allocation for "pi" out of the "if" statement, and passing pi to "agent_get_passphrase" (line 1955), but that broke symmetric encryption even worse. I commented out line 1958 and 1966, and that seems to work okay.

This bug is new in version 2.3.2.

Details

Version
2.3.2

Event Timeline

• werner claimed this task.
• werner triaged this task as High priority.
• werner added projects: gnupg (gpg23), segv.
• werner added a subscriber: • werner.

Aihhh, my fault. seems that a new version it not too far away.

(I closed this by accident)

Fixed in 2.3 and 2.2