]> git.ipfire.org Git - thirdparty/openssl.git/commit
Add checks to X509_NAME_oneline()
authorDr. Stephen Henson <steve@openssl.org>
Thu, 28 Apr 2016 18:45:44 +0000 (19:45 +0100)
committerDr. Stephen Henson <steve@openssl.org>
Fri, 29 Apr 2016 18:55:56 +0000 (19:55 +0100)
commit1c81a59503af23fa109e346c973e99c66222bf11
tree065bd9b7dcfd9fbbf71df03c5a2180c6f4f3b260
parent0b34cf82238e19f61effe10a4f0db609798b522d
Add checks to X509_NAME_oneline()

Sanity check field lengths and sums to avoid potential overflows and reject
excessively large X509_NAME structures.

Issue reported by Guido Vranken.

Reviewed-by: Matt Caswell <matt@openssl.org>
(cherry picked from commit 9b08619cb45e75541809b1154c90e1a00450e537)

Conflicts:
crypto/x509/x509.h
crypto/x509/x509_err.c
crypto/x509/x509.h
crypto/x509/x509_err.c
crypto/x509/x509_obj.c