OpenPGP: Mitigate some RuntimeExceptions uncovered using Fuzzing#2123

Open

vanitasvitae wants to merge 40 commits intobcgit:mainfrom

pgpainless:fuzzHardening

Commits on Jul 10, 2025

RegularExpression packet: Catch IndexOutOfBounds (-1) for malformed regex subpackets
vanitasvitae
committed
PGPSignature: Prevent IndexOutOfBoundsExceptions for malformed Ed25519/Ed448 signatures
vanitasvitae
committed
Introduce MalformedPacketException
vanitasvitae
committed
AEADEncDataPacket: Rethrow IllegalArgumentException for unknown AEAD algorithm as MalformedPacketException
vanitasvitae
committed
ECDHPGPPublicKey: Prevent IndexOutOfBoundsException and throw MalformedPacketException for malformed packets with unexpected kdf parameter length
vanitasvitae
committed
LiteralDataPacket: Throw MalformedPacketException for negative body length octet
vanitasvitae
committed
AEADEncDataPacket: Fix error message
vanitasvitae
committed
OctetArrayBCPGKey: Prevent OutOfMemoryError by limiting encoding length to 2mb
vanitasvitae
committed
PublicKeyEncSessionPacket: Prevent negative keyInfoLen octet
vanitasvitae
committed
PublicKeyPacket: Prevent negative keyLen octet
vanitasvitae
committed
SignaturePacket: Prevent large or negative subpacket encoding lengths
vanitasvitae
committed
SymmetricKeyEncSessionPacket: Rethrow IllegalArgumentException for unknown AEAD algorithms as IOException
vanitasvitae
committed
SignatureExpirationTime: Sanitize date encoding length
vanitasvitae
committed
NotationData: Sanitize encoding length
vanitasvitae
committed
IssuerFingerprint, IntendedRecipientFingerprint: Sanitize minimal encoding length
vanitasvitae
committed
ImageAttribute: Sanitize encoding length
vanitasvitae
committed
UserAttributeSubpacketInputStream: Sanitize encoding length and limit subpacket encoding length to max 5mb
vanitasvitae
committed
SignaturePacket: Rethrow IllegalArgumentExceptions in subpackets as MalformedPacketExceptions
vanitasvitae
committed
SignatureSubpacketInputStream: Rethrow IllegalArgumentExceptions during subpacket parsing as MalformedPacketException
vanitasvitae
committed

Commits on Jul 11, 2025

Commits on Jul 12, 2025

PGPObjectFactory: Prevent ClassCastException when parsing dangling ModDetectionCodePacket
vanitasvitae
committed

Commits on Jul 14, 2025

Commits on Jul 15, 2025

UserAttributeSubpacketInputStream: Adopt dynamic read limits from SignatureSubpacketInputStream
vanitasvitae
committed