inclavare-containers / rats-tls

RATS architecture based TLS using librats
29 stars 32 forks source link

attesters/sgx-ecdsa: add check for quote_size #142

Closed imlk0 closed 1 year ago

imlk0 commented 1 year ago

The quote_size is from outside the enclave. A malicious quote_size value would cause an out-of-bounds reading of data inside the enclave when call ocall_qe_get_quote(). Add this check to prevent this problem.

Signed-off-by: Kun Lai me@imlk.top