p11-glue / p11-kit / 28933185796

74%

push

github

rpc: add recursion depth limit into RPC attribute parsing (CVE-2026-13757)

A DoS was possible when client sent request to a server with deeply
nested attributes causing stack exhaustion on the server.
This patch adds a recursion limit on all server entry points to
prevent such attacks.

Signed-off-by: Zoltan Fridrich <zfridric@redhat.com>

10296 of 17166 branches covered (59.98%)

Branch coverage included in aggregate %.

53 of 53 new or added lines in 4 files covered. (100.0%)

29514 of 36660 relevant lines covered (80.51%)

2598.59 hits per line