]> git.ipfire.org Git - thirdparty/openssl.git/commit
projects / thirdparty / openssl.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: c73aa30) | patch
Fix name length limit check.
authorDr. Stephen Henson <steve@openssl.org>
Wed, 4 May 2016 15:09:06 +0000 (16:09 +0100)
committerDr. Stephen Henson <steve@openssl.org>
Wed, 4 May 2016 16:39:37 +0000 (17:39 +0100)
commit4e0d184ac1dde845ba9574872e2ae5c903c81dff
treed140e2448750d674e2f3fb25a4297a9b571da66btree
parentc73aa309049c4f04ec81f0f1cf552eab8456a16ecommit | diff
Fix name length limit check.

The name length limit check in x509_name_ex_d2i() includes
the containing structure as well as the actual X509_NAME. This will
cause large CRLs to be rejected.

Fix by limiting the length passed to ASN1_item_ex_d2i() which will
then return an error if the passed X509_NAME exceeds the length.

RT#4531

Reviewed-by: Rich Salz <rsalz@openssl.org>
crypto/x509/x_name.c diff | blob | blame | history
Mirror of https://github.com/openssl/openssl.git