[git] GnuPG - branch, master, updated. gnupg-2.2.7-138-g344b548

[by Werner Koch]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "The GNU Privacy Guard".

The branch, master has been updated
       via  344b548dc71657d0285d93f78f17a2663b5e586f (commit)
      from  257661d6ae0ca376df758c38fabab2316d10e3a9 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 344b548dc71657d0285d93f78f17a2663b5e586f
Author: Werner Koch <wk at gnupg.org>
Date:   Wed Jun 6 15:46:24 2018 +0200

    gpg: Also detect a plaintext packet before an encrypted packet.
    
    * g10/mainproc.c (proc_encrypted): Print warning and later force an
    error.
    --
    
    Note that when this error is triggered the plaintext from the literal
    data packet has already been outputted before the BEGIN_DECRYPTION
    status line.  We fail only later to get more information.  Callers
    need to check and act upon the decryption error code anyway.
    
    Thanks to Marcus for pointing out this case.
    
    GnuPG-bug-id: 4000
    Signed-off-by: Werner Koch <wk at gnupg.org>

diff --git a/g10/mainproc.c b/g10/mainproc.c
index 5689d73..d2ceec2 100644
--- a/g10/mainproc.c
+++ b/g10/mainproc.c
@@ -615,6 +615,14 @@ static void
 proc_encrypted (CTX c, PACKET *pkt)
 {
   int result = 0;
+  int early_plaintext = literals_seen;
+
+  if (early_plaintext)
+    {
+      log_info (_("WARNING: multiple plaintexts seen\n"));
+      write_status_errcode ("decryption.early_plaintext", GPG_ERR_BAD_DATA);
+      /* We fail only later so that we can print some more info first.  */
+    }
 
   if (!opt.quiet)
     {
@@ -734,6 +742,10 @@ proc_encrypted (CTX c, PACKET *pkt)
   if (!result)
     result = decrypt_data (c->ctrl, c, pkt->pkt.encrypted, c->dek );
 
+  /* Trigger the deferred error.  */
+  if (!result && early_plaintext)
+    result = gpg_error (GPG_ERR_BAD_DATA);
+
   if (result == -1)
     ;
   else if (!result

-----------------------------------------------------------------------

Summary of changes:
 g10/mainproc.c | 12 ++++++++++++
 1 file changed, 12 insertions(+)


hooks/post-receive
-- 
The GNU Privacy Guard
http://git.gnupg.org