diff options
| author | tb <> | 2023-01-13 14:46:08 +0000 |
|---|---|---|
| committer | tb <> | 2023-01-13 14:46:08 +0000 |
| commit | 38ed78ca28e1e252895ca064c8388657440e5142 (patch) | |
| tree | 7e39f565ad41530ea5ed02d36032be18c204e2de /src/lib/libcrypto/dsa/dsa_gen.c | |
| parent | 6ba01df7843c208cabc369d1ab8c75b71d3df26d (diff) | |
| download | openbsd-38ed78ca28e1e252895ca064c8388657440e5142.tar.gz openbsd-38ed78ca28e1e252895ca064c8388657440e5142.tar.bz2 openbsd-38ed78ca28e1e252895ca064c8388657440e5142.zip | |
Prevent 1-byte out-of-bounds read in i2c_ASN1_BIT_STRING
If an ASN.1 BIT STRING a of length > 0 contains only zero bytes in a->data,
this old code would end up reading from a->data[-1]. This may or may not
crash. Luckily, anton observed two openssl-ruby regress test failures in
the last few days, which could eventually be traced back to this (after a
lot of painful digging due to coredumps not working properly).
ok jsing
Diffstat (limited to 'src/lib/libcrypto/dsa/dsa_gen.c')
0 files changed, 0 insertions, 0 deletions