From: Andreas Steffen <andreas.steffen@strongswan.org>
Date: Mon, 18 Jun 2018 09:04:53 +0000 (+0200)
Subject: libimcv: Prevent integer overflow in time conversion
X-Git-Tag: 5.7.0dr4~6
X-Git-Url: http://git.ipfire.org/gitweb/gitweb.cgi?a=commitdiff_plain;h=782344e5e5a3e2bb959edb87fd4debf7e70d2b16;p=thirdparty%2Fstrongswan.git

libimcv: Prevent integer overflow in time conversion
---

diff --git a/src/libimcv/tcg/pts/tcg_pts_attr_simple_comp_evid.c b/src/libimcv/tcg/pts/tcg_pts_attr_simple_comp_evid.c
index 82e18e217f..c704e7d38f 100644
--- a/src/libimcv/tcg/pts/tcg_pts_attr_simple_comp_evid.c
+++ b/src/libimcv/tcg/pts/tcg_pts_attr_simple_comp_evid.c
@@ -261,8 +261,9 @@ static const int tm_leap_1970 = 477;
  */
 bool measurement_time_from_utc(time_t *measurement_time, chunk_t utc_time)
 {
-	int tm_year, tm_mon, tm_day, tm_days, tm_hour, tm_min, tm_sec, tm_secs;
+	int tm_year, tm_mon, tm_day, tm_hour, tm_min, tm_sec;
 	int tm_leap_4, tm_leap_100, tm_leap_400, tm_leap;
+	time_t tm_days, tm_secs;
 	char buf[BUF_LEN];
 
 	if (memeq(utc_undefined_time_str, utc_time.ptr, utc_time.len))