wolfssl: patch CVE-2026-0819

Details: https://nvd.nist.gov/vuln/detail/CVE-2026-0819

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
This commit is contained in:
Ankur Tyagi
2026-04-06 00:49:04 +12:00
committed by Anuj Mittal
parent a3156b1afc
commit e4fbbe5138
2 changed files with 32 additions and 0 deletions
@@ -0,0 +1,31 @@
From ce42215d0dd20742b378211671117db4e6f7e729 Mon Sep 17 00:00:00 2001
From: Reda Chouk <reda@wolfssl.com>
Date: Thu, 8 Jan 2026 19:57:24 +0100
Subject: [PATCH] Increment signedAttribsCount with the right number of
attributes it encoded
(cherry picked from commit 9c7b58656541e8d31876d7ccd2cd38140b8ffb79)
CVE: CVE-2026-0819
Upstream-Status: Backport [https://github.com/wolfSSL/wolfssl/commit/9c7b58656541e8d31876d7ccd2cd38140b8ffb79]
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
wolfcrypt/src/pkcs7.c | 5 +++++
1 file changed, 5 insertions(+)
diff --git a/wolfcrypt/src/pkcs7.c b/wolfcrypt/src/pkcs7.c
index a8545ba0a..4ba96c90d 100644
--- a/wolfcrypt/src/pkcs7.c
+++ b/wolfcrypt/src/pkcs7.c
@@ -2107,6 +2107,11 @@ static int wc_PKCS7_BuildSignedAttributes(wc_PKCS7* pkcs7, ESD* esd,
/* add custom signed attributes if set */
if (pkcs7->signedAttribsSz > 0 && pkcs7->signedAttribs != NULL) {
+ word32 availableSpace = MAX_SIGNED_ATTRIBS_SZ - atrIdx;
+
+ if (pkcs7->signedAttribsSz > availableSpace)
+ return BUFFER_E;
+
esd->signedAttribsCount += pkcs7->signedAttribsSz;
esd->signedAttribsSz += (word32)EncodeAttributes(
&esd->signedAttribs[atrIdx], (int)esd->signedAttribsCount,
@@ -27,6 +27,7 @@ SRC_URI = " \
file://CVE-2025-7394-4.patch \
file://CVE-2025-7394-5.patch \
file://CVE-2025-7394-6.patch \
file://CVE-2026-0819.patch \
"
SRCREV = "b077c81eb635392e694ccedbab8b644297ec0285"