]> git.ipfire.org Git - thirdparty/apache/httpd.git/commit
mod_md: change types of fields of ocsp_summary_ctx_t
authorRainer Jung <rjung@apache.org>
Wed, 17 Jun 2026 09:44:36 +0000 (09:44 +0000)
committerRainer Jung <rjung@apache.org>
Wed, 17 Jun 2026 09:44:36 +0000 (09:44 +0000)
commitad449e35a46f2d9f08dd4b5ca3ec0e6ad18192a5
tree4295c9a954b12183b2ac19f9d29e9608497566b1
parent4d02903f9c81bbbe11161742f7e1528fc6a4398d
mod_md: change types of fields of ocsp_summary_ctx_t

The number of members in ostat_by_id may be up to UINT_MAX
and there are no guarantees that all types of members (good,
revoked or unknown) are present. An integer overflow may also
occur in md_ocsp_get_summary() when they are summed as ints.

Change types of good, revoked and unknown to unsigned.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Submitted by: Anastasia Belova <nabelova31 gmail.com>
Github: closes #534

Backport of r1930710 from trunk, [mod_md CTR]

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1935448 13f79535-47bb-0310-9956-ffa450edef68
modules/md/md_ocsp.c