osmocom
/
libosmocore
mirror of https://gerrit.osmocom.org/libosmocore
11
0
Fork 1
Code Issues Releases Wiki Activity
libosmocore/src/gsm
History
Holger Hans Peter Freyther aa16d63c27 milenage/aes: Address undefined behavior on bitshift 
Extend the u8 to u32 before going to shift it.

Fixes:
milenage/aes-internal.c:799:4: runtime error: left shift of 128 by 24 places cannot be represented in type 'int'
    #0 0x7f84e9fe86a2 in rijndaelKeySetupEnc (/home/builder/jenkins/workspace/Osmocom_Sanitizer/source/libosmocore/src/gsm/.libs/libosmogsm.so.5+0xfa6a2)
    #1 0x7f84e9febad8 in aes_encrypt_init (/home/builder/jenkins/workspace/Osmocom_Sanitizer/source/libosmocore/src/gsm/.libs/libosmogsm.so.5+0xfdad8)
    #2 0x7f84e9fe7d14 in aes_128_encrypt_block (/home/builder/jenkins/workspace/Osmocom_Sanitizer/source/libosmocore/src/gsm/.libs/libosmogsm.so.5+0xf9d14)
    #3 0x7f84e9febe7d in milenage_f1 (/home/builder/jenkins/workspace/Osmocom_Sanitizer/source/libosmocore/src/gsm/.libs/libosmogsm.so.5+0xfde7d)
    #4 0x7f84e9fee2ce in milenage_generate (/home/builder/jenkins/workspace/Osmocom_Sanitizer/source/libosmocore/src/gsm/.libs/libosmogsm.so.5+0x1002ce)
    #5 0x7f84e9fe76d7 in milenage_gen_vec (/home/builder/jenkins/workspace/Osmocom_Sanitizer/source/libosmocore/src/gsm/.libs/libosmogsm.so.5+0xf96d7)
    #6 0x7f84e9fe6c08 in osmo_auth_gen_vec (/home/builder/jenkins/workspace/Osmocom_Sanitizer/source/libosmocore/src/gsm/.libs/libosmogsm.so.5+0xf8c08)
    #7 0x401441 in main (/home/builder/jenkins/workspace/Osmocom_Sanitizer/source/libosmocore/tests/auth/.libs/lt-milenage_test+0x401441)
    #8 0x7f84e8e33a3f in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x20a3f)
    #9 0x400e58 in _start (/home/builder/jenkins/workspace/Osmocom_Sanitizer/source/libosmocore/tests/auth/.libs/lt-milenage_test+0x400e58)
 		2016-04-24 20:57:30 +02:00
..
milenage milenage/aes: Address undefined behavior on bitshift 2016-04-24 20:57:30 +02:00
Makefile.am remove our internal copy of talloc, use system libtalloc 2015-12-05 23:38:18 +01:00
a5.c Deprecate osmo_a5_1 and osmo_a5_2 2016-04-22 15:10:53 +02:00
abis_nm.c libosmo-gsm: Add PCHAN/LCHAN types for CBCH 2014-12-28 13:37:01 +01:00
apn.c gsm: Add APN conversion functions 2016-01-15 14:46:19 +01:00
auth_comp128v1.c Deprecate comp128 2016-04-22 15:10:55 +02:00
auth_comp128v23.c Refactor COMP128v23 implementation and add test suit 2013-12-07 18:10:38 +01:00
auth_core.c misc: Doxygen tweaks: fixed some typos and minor errors 2013-02-15 13:27:59 +01:00
auth_milenage.c Improve code reuse 2016-04-22 15:09:49 +02:00
comp128.c Deprecate comp128 2016-04-22 15:10:55 +02:00
comp128v23.c Refactor COMP128v23 implementation and add test suit 2013-12-07 18:10:38 +01:00
gan.c Fix copyright header in gan.c 2014-09-11 13:20:33 +08:00
gprs_cipher_core.c Update internal GPRS cipher API 2016-04-22 15:09:27 +02:00
gsm48.c Export names for gsm_chan_t and gsm48_chan_mode 2016-03-30 21:50:44 +02:00
gsm48_ie.c gsm/gsm48ie: Fix range 256 W[i] decoding 2014-01-13 15:15:11 +01:00
gsm0341.c fixup 2014-12-30 00:43:32 +01:00
gsm0411_smc.c Change license of gsm0411_smc/smr to GPLv2+ 2014-10-26 20:50:31 +01:00
gsm0411_smr.c Change license of gsm0411_smc/smr to GPLv2+ 2014-10-26 20:50:31 +01:00
gsm0411_utils.c Change license of gsm0411_smc/smr to GPLv2+ 2014-10-26 20:50:31 +01:00
gsm0480.c 04.08: add inline funcs for pdisc + msg type bitmasks 2016-03-15 14:10:45 +01:00
gsm0502.c import gsm0502_calc_paging_group() from openbsc 2011-06-26 14:47:16 +02:00
gsm0808.c gsm0808: Remove duplicate initialization 2015-03-18 21:54:37 +01:00
gsm_utils.c Add function for appending range1024 to bitvec 2016-04-23 16:37:05 +02:00
ipa.c ipa: recv is declared in different headers on BSD 2015-11-09 16:21:19 +00:00
kasumi.c gsm: Add Kasumi cipher implementation 2014-06-16 14:59:30 +02:00
lapd_core.c some comments / fixed typos 2015-12-21 11:25:05 +01:00
lapdm.c LaPDm: Refuse SUSPEND/RESUME/RECONNECT in BTS mode 2015-12-19 17:06:57 +01:00
libosmogsm.map Add function for appending range1024 to bitvec 2016-04-23 16:37:05 +02:00
rsl.c RSL: Add enum + TLV definitions for ip.access style embedded IEs 2015-12-13 21:57:29 +01:00
rxlev_stat.c bitvec: add bitvec_find_first_bit_pos() from gsm/rxlev_stat.c 2011-03-28 20:00:45 +02:00
sysinfo.c Add function to get osmo_earfcn bit size 2016-04-16 13:41:56 +02:00
tlv_parser.c fix some typos 2015-11-02 20:23:34 +01:00