]> git.ipfire.org Git - thirdparty/suricata.git/commit
der/asn1: reduce max depth limit to 32
authorVictor Julien <victor@inliniac.net>
Sun, 22 Sep 2019 05:54:57 +0000 (07:54 +0200)
committerVictor Julien <victor@inliniac.net>
Mon, 23 Sep 2019 13:42:13 +0000 (15:42 +0200)
commit7864e8e7cc8e1a2ce2989459d9af5d9072a31ab6
tree30b9a18d281e51eaeba317a8837262f02a1eed18
parent335ad2d8cc1c7dae39ee3a9f8523fd7384663465
der/asn1: reduce max depth limit to 32

OpenSSL uses 30, so this seems a reasonable limit.

Set a smaller limit than before to reduce the resources spent on
specially crafted input designed to be maximally expensive.
src/util-decode-der.c