]> git.ipfire.org Git - thirdparty/openssl.git/commit
projects / thirdparty / openssl.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 5595058) | patch
Ensure that we check the ASN.1 type of an "otherName" before using it
authorMatt Caswell <matt@openssl.org>
Thu, 26 Aug 2021 08:43:50 +0000 (09:43 +0100)
committerPauli <pauli@openssl.org>
Tue, 31 Aug 2021 10:47:25 +0000 (20:47 +1000)
commitc7f8edfc1186a48463c14cfdc7f70456cbcb1cda
tree67e6dc36e1453eabe7cb28d69d2d66eda7227be8tree
parent5595058714832bdff03604c881cf44f91c14b5fccommit | diff
Ensure that we check the ASN.1 type of an "otherName" before using it

We should not assume that the type of an ASN.1 value is UTF8String as
expected. We must actually check it, otherwise we could get a NULL ptr
deref, or worse memory errors.

Reported by David Benjamin.

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/16443)
crypto/x509/v3_utl.c diff | blob | blame | history
Mirror of https://github.com/openssl/openssl.git