Description of problem: There is a seg fault caused by a lack of null termination. Version-Release number of selected component (if applicable): opensc-0.20.0-4 How reproducible: 100% when memory alignment is missing a coincidental NULL. Steps to Reproduce: 1. perform operations on a Gemalto ID Prime smart card Actual results: Segmentation fault Expected results: success Additional info: Fixed in upstream, see https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20510 https://github.com/OpenSC/OpenSC/commit/34dad7f543f006ad269ce1f935a9e8d3e3a83db7 --- ./src/libopensc/card-idprime.c.orig 2023-05-07 06:13:39.000000000 +0000 +++ ./src/libopensc/card-idprime.c 2023-05-07 06:13:12.000000000 +0000 @@ -52,6 +52,7 @@ "ff:ff:00:ff:ff:ff:ff:ff:ff:ff:00:00:00:00:ff:ff:ff:ff:ff:ff", "Gemalto IDPrime MD 8840, 3840, 3810, 840 and 830 Cards", SC_CARD_TYPE_IDPRIME_GENERIC, 0, NULL }, + { NULL, NULL, NULL, 0, 0, NULL } }; static const sc_path_t idprime_path = {
Thank you for the report. We should indeed fix this when we will build a new package for RHEL 8.
Dear Jason, would you be able to test opensc build with the fix and let us know if it works for you? We should be able to provide you with the build next week. Regards, Marek