Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: e6cec05c0d9bc25ac2fcbdbf65e0bb10ebf784a2
      
https://github.com/WebKit/WebKit/commit/e6cec05c0d9bc25ac2fcbdbf65e0bb10ebf784a2
  Author: Claudio Saavedra <[email protected]>
  Date:   2026-10-12 (Mon, 12 Oct 2026)

  Changed paths:
    A LayoutTests/http/wpt/crypto/export-rsa-key-crash.any-expected.txt
    A LayoutTests/http/wpt/crypto/export-rsa-key-crash.any.html
    A LayoutTests/http/wpt/crypto/export-rsa-key-crash.any.js
    A LayoutTests/http/wpt/crypto/export-rsa-key-crash.any.worker-expected.txt
    A LayoutTests/http/wpt/crypto/export-rsa-key-crash.any.worker.html
    M Source/WebCore/crypto/gcrypt/GCryptUtilities.cpp

  Log Message:
  -----------
  [GCrypt] Exporting an RSA key with a zero component crashes
https://bugs.webkit.org/show_bug.cgi?id=327077

Reviewed by Javier Fernandez.

mpiSignedData() reads the first byte of the MPI data to decide whether
a sign byte is needed, but the data for zero is empty, so exporting an
RSA key with, for example, a zero public exponent as SPKI or PKCS#8
crashed. Encode zero as a single zero byte, as DER requires.

Test: http/wpt/crypto/export-rsa-key-crash.any.html

* LayoutTests/http/wpt/crypto/export-rsa-key-crash.any-expected.txt: Added.
* LayoutTests/http/wpt/crypto/export-rsa-key-crash.any.html: Added.
* LayoutTests/http/wpt/crypto/export-rsa-key-crash.any.js: Added.
* LayoutTests/http/wpt/crypto/export-rsa-key-crash.any.worker-expected.txt: 
Added.
* LayoutTests/http/wpt/crypto/export-rsa-key-crash.any.worker.html: Added.
* Source/WebCore/crypto/gcrypt/GCryptUtilities.cpp:
(WebCore::mpiSignedData):

Canonical link: https://commits.webkit.org/323448@main



To unsubscribe from these emails, change your notification settings at 
https://github.com/WebKit/WebKit/settings/notifications

Reply via email to