From 1d7ff81bd24dc14730f84f040f63a8da5a344d39 Mon Sep 17 00:00:00 2001 From: Rob Austein Date: Sat, 5 Nov 2016 00:44:42 -0400 Subject: ks_list() was returning garbage for keys not visible to current session. --- ks_volatile.c | 12 ++++++++---- 1 file changed, 8 insertions(+), 4 deletions(-) (limited to 'ks_volatile.c') diff --git a/ks_volatile.c b/ks_volatile.c index c416263..c8a424c 100644 --- a/ks_volatile.c +++ b/ks_volatile.c @@ -360,23 +360,27 @@ static hal_error_t ks_list(hal_ks_t *ks, if (ksv->db == NULL) return HAL_ERROR_KEYSTORE_ACCESS; - if (ksv->db->ksi.used > result_max) - return HAL_ERROR_RESULT_TOO_LONG; + *result_len = 0; for (int i = 0; i < ksv->db->ksi.used; i++) { unsigned b = ksv->db->ksi.index[i]; + if (ksv->db->ksi.names[b].chunk > 0) continue; + if (!key_visible_to_session(ksv, client, session, &ksv->db->keys[b])) continue; + + if (*result_len >= result_max) + return HAL_ERROR_RESULT_TOO_LONG; + result[i].name = ksv->db->ksi.names[b].name; result[i].type = ksv->db->keys[b].type; result[i].curve = ksv->db->keys[b].curve; result[i].flags = ksv->db->keys[b].flags; + ++ *result_len; } - *result_len = ksv->db->ksi.used; - return HAL_OK; } -- cgit v1.2.3