diff options
| author | tb <> | 2021-12-28 20:44:56 +0000 |
|---|---|---|
| committer | tb <> | 2021-12-28 20:44:56 +0000 |
| commit | d965c76e1e1524ce273efb0e344e251f2a86c49a (patch) | |
| tree | f76d901323d0c16278755681dabdb7bbff17e5da /src/lib/libcrypto/dsa/dsa_ossl.c | |
| parent | d5e5351d999b577920805503d1fdb3dcd11ea7b4 (diff) | |
| download | openbsd-d965c76e1e1524ce273efb0e344e251f2a86c49a.tar.gz openbsd-d965c76e1e1524ce273efb0e344e251f2a86c49a.tar.bz2 openbsd-d965c76e1e1524ce273efb0e344e251f2a86c49a.zip | |
Check AFI/SAFI before comparing them in X509v3_addr_is_canonical()
As mentioned in a previous commit, IPAddressFamily_cmp() can't really
check for trailing garbage in addressFamily->data. Since the path
validation and hence the X.509 validator call X509v3_addr_is_canonical(),
this deals with only partially validated data.
ok jsing
Diffstat (limited to 'src/lib/libcrypto/dsa/dsa_ossl.c')
0 files changed, 0 insertions, 0 deletions