Fix panic when parsing empty EdDSA public key

ProtonMail · Jun 19, 2023 · fea64f7 · fea64f7
1 parent 6f98819
commit fea64f7
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/openpgp/packet/public_key.go b/openpgp/packet/public_key.go
@@ -415,6 +415,10 @@ func (pk *PublicKey) parseEdDSA(r io.Reader) (err error) {
 		return
 	}
 
+	if len(pk.p.Bytes()) == 0 {
+		return errors.StructuralError("empty EdDSA public key")
+	}
+
 	pub := eddsa.NewPublicKey(c)
 
 	switch flag := pk.p.Bytes()[0]; flag {