]> git.ipfire.org Git - thirdparty/FORT-validator.git/commit
Prevent crash on BER-encoded signedAttrs
authorAlberto Leiva Popper <ydahhrk@gmail.com>
Tue, 6 Aug 2024 16:35:59 +0000 (10:35 -0600)
committerAlberto Leiva Popper <ydahhrk@gmail.com>
Tue, 6 Aug 2024 16:35:59 +0000 (10:35 -0600)
commit521b1a0db5041258096fbabdf8fc1e10ecc793cf
tree6cbff6152fa3146269a54153f59fc3d6179282cc
parent942f921ba7244cdcf4574cedc4c16392a7cc594b
Prevent crash on BER-encoded signedAttrs

The code was assuming the object was DER-encoded, and the relevant
integer was therefore in short form.

Because I postponed the DER enforcement in
deef7b7823f21914b17838f152a8bd510a348f54, the code should not make
reckless assumptions about the signedAttrs encoding.

Thanks to Niklas Vogel for reporting this.
src/object/certificate.c