open-vault/sdk
Alexander Scheel 3bad83f76f
Prevent CWE-190/AllocationSizeOverflow in KDF (#13237)
In the Counter-mode KBKDF implementation, due to the nature of the PRF
(being implemented as a function rather than a hash.Hash instance), we
need to allocate a buffer capable of storing the entire input to the
PRF. This consists of the user-supplied context with 8 additional bytes
(4 before and 4 after) of encoded integers.

If the user supplies a maximally-sized context, the internally allocated
buffer's size computation will overflow, resulting in a runtime panic.
Guard against this condition.

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>
2021-11-22 12:25:50 -05:00
..
database Add extra debugging to help identify failures within mssql test (#13142) 2021-11-15 12:51:16 -05:00
framework Update some SDK dependency versions (#12828) 2021-10-14 09:47:32 -07:00
helper Prevent CWE-190/AllocationSizeOverflow in KDF (#13237) 2021-11-22 12:25:50 -05:00
logical backport error changes from ent PR (#12926) 2021-10-26 10:11:24 -06:00
physical [VAULT-4034] Revert back to caching nil values (#13013) 2021-11-02 12:00:37 -07:00
plugin Adds ability to define an inline policy and internal metadata on tokens (#12682) 2021-10-07 10:36:22 -07:00
queue Fixed a bunch of typos (#7146) 2019-07-18 21:10:15 -04:00
version 1.10.0-dev version bump (#12987) 2021-11-03 12:50:12 -04:00
README.md Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
go.mod Update some SDK dependency versions (#12828) 2021-10-14 09:47:32 -07:00
go.sum Update some SDK dependency versions (#12828) 2021-10-14 09:47:32 -07:00

README.md

Vault SDK libs

This package provides the sdk package which contains code useful for developing Vault plugins.

Although we try not to break functionality, we reserve the right to reorganize the code at will and may occasionally cause breaks if they are warranted. As such we expect the tag of this module will stay less than v1.0.0.

For any major changes we will try to give advance notice in the CHANGES section of Vault's CHANGELOG.md.