]> git.ipfire.org Git - thirdparty/krb5.git/commit
In PKINIT, check for null PKCS7 enveloped fields 1320/head
authorGreg Hudson <ghudson@mit.edu>
Sat, 25 Nov 2023 16:04:56 +0000 (11:04 -0500)
committerGreg Hudson <ghudson@mit.edu>
Thu, 30 Nov 2023 21:44:01 +0000 (16:44 -0500)
commit48ccd81656381522d1f9ccb8705c13f0266a46ab
tree31a725445067b8e3c598b2edce2abb986bb8a0f3
parentc20251dafd6120fa08c76b19315cb9deb1a1b24e
In PKINIT, check for null PKCS7 enveloped fields

The PKCS7 ContentInfo content field and EncryptedContentInfo
encryptedContent field are optional.  Check for null values in
cms_envelopeddata_verify() before calling pkcs7_decrypt().  Reported
by Bahaa Naamneh.

ticket: 9107 (new)
tags: pullup
target_version: 1.21-next
target_version: 1.20-next
src/plugins/preauth/pkinit/pkinit_crypto_openssl.c