cryptenroll: refuse reading a key longer than 4 MiB

If we open this up to external processes let's tighten rules and refuse reading more than 4 MiB as key, after all this is locked memory.
2026-06-27 17:28:39 +02:00
parent 0089a46b6b
commit 47dc8abf8b
1 changed files with 2 additions and 2 deletions
@@ -55,8 +55,8 @@ int load_volume_key_keyfile(
                        AT_FDCWD,
                        c->unlock_keyfile,
                        UINT64_MAX,
-                        SIZE_MAX,
-                        READ_FULL_FILE_SECURE|READ_FULL_FILE_WARN_WORLD_READABLE|READ_FULL_FILE_CONNECT_SOCKET,
+                        4U * U64_MB, /* safety net */
+                        READ_FULL_FILE_SECURE|READ_FULL_FILE_WARN_WORLD_READABLE|READ_FULL_FILE_CONNECT_SOCKET|READ_FULL_FILE_FAIL_WHEN_LARGER,
                        NULL,
                        &password,
                        &password_len);