Skip to content

Fix KEY_PAIR_INFO PQC length cursor handling#3607

Open
czwolak wants to merge 1 commit intoDMTF:mainfrom
czwolak:czwolak/issue-3593-key-pair-info-parser-fix
Open

Fix KEY_PAIR_INFO PQC length cursor handling#3607
czwolak wants to merge 1 commit intoDMTF:mainfrom
czwolak:czwolak/issue-3593-key-pair-info-parser-fix

Conversation

@czwolak
Copy link
Copy Markdown
Contributor

@czwolak czwolak commented Apr 22, 2026

Fix #3593.

Use raw PQC length fields for cursor advancement and copy only min(raw_len, 4) into local 32-bit values.

Add requester unit test coverage for SPDM 1.4 oversized PQC capability length parsing regression.

Align KEY_PAIR_INFO requester test fixtures with mixed classical/PQC validation rules.

@czwolak czwolak force-pushed the czwolak/issue-3593-key-pair-info-parser-fix branch from 2729807 to 198c9be Compare April 22, 2026 13:25
@czwolak czwolak changed the title Fix KEY_PAIR_INFO PQC length cursor handling Fix #3593: KEY_PAIR_INFO PQC length cursor handlin Apr 22, 2026
Signed-off-by: Cezary Zwolak <cezary.zwolak@intel.com>
@czwolak czwolak force-pushed the czwolak/issue-3593-key-pair-info-parser-fix branch 2 times, most recently from 625b0f6 to 5f479cc Compare April 22, 2026 13:33
@steven-bellock steven-bellock changed the title Fix #3593: KEY_PAIR_INFO PQC length cursor handlin Fix KEY_PAIR_INFO PQC length cursor handling Apr 22, 2026
@jyao1 jyao1 added the 4.0 Issues and features slated for the next major revision of libspdm. label Apr 23, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

4.0 Issues and features slated for the next major revision of libspdm.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

GET_KEY_PAIR_INFO/KEY_PAIR_INFO (SPDM 1.4): Oversized PQC Length Fields Are Truncated Instead of Rejected

2 participants