diff options
| author | jsing <> | 2019-04-10 16:23:55 +0000 |
|---|---|---|
| committer | jsing <> | 2019-04-10 16:23:55 +0000 |
| commit | 0eabad513bdb13f3dc8134e8f7b37906897211df (patch) | |
| tree | 0a9c02f6209b3ff040902c8d9c0757be964ad0eb /src/lib/libc | |
| parent | 725560f8660d40321b5c2f8964b9eb5081895c1e (diff) | |
| download | openbsd-0eabad513bdb13f3dc8134e8f7b37906897211df.tar.gz openbsd-0eabad513bdb13f3dc8134e8f7b37906897211df.tar.bz2 openbsd-0eabad513bdb13f3dc8134e8f7b37906897211df.zip | |
Avoid an overread caused by d2i_PrivateKey().
There are cases where the old_priv_decode() function can fail but consume
bytes. This will result in the pp pointer being advanced, which causes
d2i_PKCS8_PRIV_KEY_INFO() to be called with an advanced pointer and
incorrect length.
Fixes oss-fuzz #13803 and #14142.
ok deraadt@ tb@
Diffstat (limited to 'src/lib/libc')
0 files changed, 0 insertions, 0 deletions