Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-25067

Fix SAST finding in libksba

XMLWordPrintable

    • libksba-1.5.1-7.el9
    • None
    • None
    • 1
    • rhel-sst-security-crypto
    • ssg_security
    • 26
    • 0.5
    • False
    • Hide

      None

      Show
      None
    • No
    • Crypto24Q3
    • Release Note Not Required
    • None

      The report from RHEL-23357 highlighted one possible issue in libksba that would be worth fixing:

      "Error: UNINIT (CWE-457):
libksba-1.5.1/src/der-builder.c:552: var_decl: Declaring variable ""err"" without initializer.
libksba-1.5.1/src/der-builder.c:666: uninit_use: Using uninitialized value ""err"".
#  664|    leave:
#  665|     xfree (buffer);
#  666|->   return err;
#  667|   }"

      The variable err is used uninitialized when no error happens along the way.

      Reported upstream: https://dev.gnupg.org/T6992

              jjelen@redhat.com Jakub Jelen
              jjelen@redhat.com Jakub Jelen
              Jakub Jelen Jakub Jelen
              Alexander Sosedkin Alexander Sosedkin
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated:
                Resolved: