]> git.ipfire.org Git - thirdparty/openssl.git/commit
Check that multi-strings/CHOICE types don't use implicit tagging
authorMatt Caswell <matt@openssl.org>
Thu, 12 Nov 2020 11:58:12 +0000 (11:58 +0000)
committerMatt Caswell <matt@openssl.org>
Tue, 8 Dec 2020 10:18:44 +0000 (10:18 +0000)
commit1ecc76f6746cefd502c7e9000bdfa4e5d7911386
treebfef1dffa927150f5b35c0ddc6ac3362c8b398cd
parentf960d81215ebf3f65e03d4d5d857fb9b666d6920
Check that multi-strings/CHOICE types don't use implicit tagging

It never makes sense for multi-string or CHOICE types to use implicit
tagging since the content would be ambiguous. It is an error in the
template if this ever happens. If we detect it we should stop parsing.

Thanks to David Benjamin from Google for reporting this issue.

Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
crypto/asn1/asn1_err.c
crypto/asn1/tasn_dec.c
crypto/err/openssl.txt
include/openssl/asn1err.h