From 74a72d3a82d1f49d55ef822ededec74738a30ec4 Mon Sep 17 00:00:00 2001 From: Frank Morgner Date: Wed, 4 Jun 2025 00:52:13 +0200 Subject: [PATCH] fixed Stack-buffer-overflow WRITE fixes https://issues.oss-fuzz.com/issues/421520684 (cherry picked from commit eab4d17866bb457dd86d067b304294e9f6671d52) CVE: CVE-2025-66215 Upstream-Status: Backport [https://github.com/OpenSC/OpenSC/commit/eab4d17866bb457dd86d067b304294e9f6671d52] Signed-off-by: Ankur Tyagi --- src/libopensc/card-oberthur.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/libopensc/card-oberthur.c b/src/libopensc/card-oberthur.c index d5445f01a..a8aba7992 100644 --- a/src/libopensc/card-oberthur.c +++ b/src/libopensc/card-oberthur.c @@ -1135,7 +1135,7 @@ auth_compute_signature(struct sc_card *card, const unsigned char *in, size_t ile apdu.lc = ilen; apdu.le = olen > 256 ? 256 : olen; apdu.resp = resp; - apdu.resplen = olen; + apdu.resplen = SC_MAX_APDU_BUFFER_SIZE; rv = sc_transmit_apdu(card, &apdu); LOG_TEST_RET(card->ctx, rv, "APDU transmit failed");