]> git.ipfire.org Git - thirdparty/openssl.git/commit
Fix append_ia5 function to not assume NUL terminated strings
authorMatt Caswell <matt@openssl.org>
Wed, 18 Aug 2021 16:58:23 +0000 (17:58 +0100)
committerMatt Caswell <matt@openssl.org>
Tue, 24 Aug 2021 13:22:06 +0000 (14:22 +0100)
commit98624776c4d501c8badd6f772ab7048ac9191cb9
tree5f8031dd6486b58d5a92e0346c9ede2fb5eded28
parent1f365708a3318a5f1a395f90c38b584a58d37fb9
Fix append_ia5 function to not assume NUL terminated strings

ASN.1 strings may not be NUL terminated. Don't assume they are.

CVE-2021-3712

Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: David Benjamin <davidben@google.com>
crypto/x509/v3_utl.c