]> git.ipfire.org Git - thirdparty/openssl.git/commit
Fix ASN1_TYPE_cmp
authorDr. Stephen Henson <steve@openssl.org>
Mon, 9 Mar 2015 23:11:45 +0000 (23:11 +0000)
committerMatt Caswell <matt@openssl.org>
Thu, 19 Mar 2015 13:00:44 +0000 (13:00 +0000)
commit497d0b00dca876beb6c81f2ea6d7160897434c2e
tree9ccaf3ece8df40192680832188f9075362e87750
parent674341f1b0548e36a6cc49917334f5cbd09aaa2c
Fix ASN1_TYPE_cmp

Fix segmentation violation when ASN1_TYPE_cmp is passed a boolean type. This
can be triggered during certificate verification so could be a DoS attack
against a client or a server enabling client authentication.

CVE-2015-0286

Reviewed-by: Richard Levitte <levitte@openssl.org>
crypto/asn1/a_type.c