openpgp: Set the ecpoint_len based on received length

This avoids buffer overrun later when the further processing assumes the length is a field length Signed-off-by: Jakub Jelen <[email protected]>
Jakuje · Aug 16, 2024 · b165045 · b165045
1 parent 85b8199
commit b165045
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/src/libopensc/card-openpgp.c b/src/libopensc/card-openpgp.c
@@ -2961,6 +2961,7 @@ pgp_parse_and_set_pubkey_output(sc_card_t *card, u8* data, size_t data_len,
 					LOG_FUNC_RETURN(card->ctx, SC_ERROR_NOT_ENOUGH_MEMORY);
 			}
 			memcpy(key_info->u.ec.ecpoint, part + 1, len - 1);
+			key_info->u.ec.ecpoint_len = len - 1;
 		}
 
 		/* go to next part to parse */