]> git.ipfire.org Git - thirdparty/krb5.git/commit
projects / thirdparty / krb5.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: c20251d) | patch
In PKINIT, check for null PKCS7 enveloped fields 1320/head
authorGreg Hudson <ghudson@mit.edu>
Sat, 25 Nov 2023 16:04:56 +0000 (11:04 -0500)
committerGreg Hudson <ghudson@mit.edu>
Thu, 30 Nov 2023 21:44:01 +0000 (16:44 -0500)
commit48ccd81656381522d1f9ccb8705c13f0266a46ab
tree31a725445067b8e3c598b2edce2abb986bb8a0f3tree | snapshot
parentc20251dafd6120fa08c76b19315cb9deb1a1b24ecommit | diff
In PKINIT, check for null PKCS7 enveloped fields

The PKCS7 ContentInfo content field and EncryptedContentInfo
encryptedContent field are optional.  Check for null values in
cms_envelopeddata_verify() before calling pkcs7_decrypt().  Reported
by Bahaa Naamneh.

ticket: 9107 (new)
tags: pullup
target_version: 1.21-next
target_version: 1.20-next
src/plugins/preauth/pkinit/pkinit_crypto_openssl.c diff | blob | blame | history
Mirror of https://github.com/krb5/krb5.git