[Rpm-maint] [rpm-software-management/rpm] Use pgpGet() instead of manual bounds checks (#1711)

[Demi Marie Obenour]

This avoids undefined pointer arithmetic on errors.  The new code is
also simpler and properly rejects indefinite-length packets.

This depends on #1706, and should not be merged until #1706 is.
You can view, comment on, or merge this pull request online at:

  https://github.com/rpm-software-management/rpm/pull/1711

-- Commit Summary --

  * pgpGet(): check that the returned length is in bounds
  * Use pgpGet() instead of manual bounds checks

-- File Changes --

    M rpmio/rpmpgp.c (50)

-- Patch Links --

https://github.com/rpm-software-management/rpm/pull/1711.patch
https://github.com/rpm-software-management/rpm/pull/1711.diff

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/pull/1711
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20210617/3fc91c49/attachment.html>