git.ipfire.org Git - thirdparty/openssl.git/commit

]> git.ipfire.org Git - thirdparty/openssl.git/commit

projects / thirdparty / openssl.git / commit

author	Matt Caswell <matt@openssl.org>
	Thu, 22 Mar 2018 09:39:53 +0000 (09:39 +0000)
committer	Matt Caswell <matt@openssl.org>
	Tue, 27 Mar 2018 09:23:34 +0000 (10:23 +0100)
commit	2ac4c6f7b2b2af20c0e2b0ba05367e454cd11b33
tree	0e69c6d2738c34c03744560beddf5b15ec73585b	tree \| snapshot
parent	d8278dac47996a442a480958702d913f2eff7b93	commit \| diff

Limit ASN.1 constructed types recursive definition depth

Constructed types with a recursive definition (such as can be found in
PKCS7) could eventually exceed the stack given malicious input with
excessive recursion. Therefore we limit the stack depth.

CVE-2018-0739

Credit to OSSFuzz for finding this issue.

Reviewed-by: Rich Salz <rsalz@openssl.org>

crypto/asn1/asn1_err.c		diff \| blob \| blame \| history
crypto/asn1/tasn_dec.c		diff \| blob \| blame \| history
include/openssl/asn1.h		diff \| blob \| blame \| history

Mirror of https://github.com/openssl/openssl.git

RSS Atom