From: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date: Sun, 4 Jan 2015 21:46:16 +0000 (+0100)
Subject: certtool: use 64-bit type for CRL serial number
X-Git-Tag: gnutls_3_4_0~395
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=7512ee687d0a5bc2fec7528343bf1e5b61396751;p=thirdparty%2Fgnutls.git

certtool: use 64-bit type for CRL serial number
---

diff --git a/src/certtool-cfg.c b/src/certtool-cfg.c
index 06dcacf202..abaa631256 100644
--- a/src/certtool-cfg.c
+++ b/src/certtool-cfg.c
@@ -170,7 +170,7 @@ typedef struct _cfg_ctx {
 	int ipsec_ike_key;
 	char **key_purpose_oids;
 	int crl_next_update;
-	int crl_number;
+	int64_t crl_number;
 	int crq_extensions;
 	char *proxy_policy_language;
 	char **ocsp_uris;
@@ -429,6 +429,8 @@ int template_parse(const char *template)
 	READ_NUMERIC("expiration_days", cfg.expiration_days);
 	READ_NUMERIC("crl_next_update", cfg.crl_next_update);
 	READ_NUMERIC("crl_number", cfg.crl_number);
+	CHECK_INT64_OVERFLOW(cfg.crl_number);
+
 	READ_NUMERIC("path_len", cfg.path_len);
 
 	val = optionGetValue(pov, "proxy_policy_language");