diff options
| author | tb <> | 2024-12-11 11:22:06 +0000 |
|---|---|---|
| committer | tb <> | 2024-12-11 11:22:06 +0000 |
| commit | 970e2c0530a648dff474a41b3cbd026a412a8b50 (patch) | |
| tree | 2b9df34d0b7105df887b2e6eed474f8d783767bf /src/lib/libcrypto/dsa | |
| parent | 70130446f01475b353c1c8b306aa7ed4662bb3c4 (diff) | |
| download | openbsd-970e2c0530a648dff474a41b3cbd026a412a8b50.tar.gz openbsd-970e2c0530a648dff474a41b3cbd026a412a8b50.tar.bz2 openbsd-970e2c0530a648dff474a41b3cbd026a412a8b50.zip | |
Avoid an oob access in asn1_item_free()
As explained in a comment, this needs to loop backwards and the last tt--
ends up pointing at &it->templates[-1], which isn't ok. Use a simple way
of looping, which is also ugly and involves some type confusion as pointed
out by claudio. However, type confusion is common in libcrypto's asn1 code
and won't be fixed anytime soon anyway.
ok jsing
Diffstat (limited to 'src/lib/libcrypto/dsa')
0 files changed, 0 insertions, 0 deletions