From: Tim Kosse <tim.kosse@filezilla-project.org>
Date: Mon, 4 Jan 2016 15:40:26 +0000 (+0100)
Subject: Fix out-of-bounds read in gnutls_x509_ext_export_key_usage
X-Git-Tag: gnutls_3_5_0~428
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=2adb9b2bfb31afebbdd9f990e2b74c9a3d4e5c57;p=thirdparty%2Fgnutls.git

Fix out-of-bounds read in gnutls_x509_ext_export_key_usage
---

diff --git a/lib/x509/x509_ext.c b/lib/x509/x509_ext.c
index 9a0052733e..3373e97aef 100644
--- a/lib/x509/x509_ext.c
+++ b/lib/x509/x509_ext.c
@@ -1125,7 +1125,7 @@ int gnutls_x509_ext_export_key_usage(unsigned int usage, gnutls_datum_t * ext)
 	str[0] = usage & 0xff;
 	str[1] = usage >> 8;
 
-	result = asn1_write_value(c2, "", str, 9);
+	result = asn1_write_value(c2, "", str, 2);
 	if (result != ASN1_SUCCESS) {
 		gnutls_assert();
 		asn1_delete_structure(&c2);