Verify ASN1 objects types before attempting to access them as a particular

type.
ok guenther@ doug@

1 files changed, 3 insertions, 1 deletions

diff --git a/src/lib/libcrypto/ts/ts_rsp_verify.c b/src/lib/libcrypto/ts/ts_rsp_verify.c
index 797877011c..204c6a9df8 100644
--- a/src/lib/libcrypto/ts/ts_rsp_verify.c
+++ b/src/lib/libcrypto/ts/ts_rsp_verify.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ts_rsp_verify.c,v 1.15 2015/07/19 05:42:55 miod Exp $ */
+/* $OpenBSD: ts_rsp_verify.c,v 1.16 2015/07/19 18:25:59 miod Exp $ */
 /* Written by Zoltan Glozik (zglozik@stones.com) for the OpenSSL
  * project 2002.
  */
@@ -312,6 +312,8 @@ ESS_get_signing_cert(PKCS7_SIGNER_INFO *si)
             NID_id_smime_aa_signingCertificate);
         if (!attr)
                 return NULL;
+        if (attr->type != V_ASN1_SEQUENCE)
+                return NULL;
         p = attr->value.sequence->data;
         return d2i_ESS_SIGNING_CERT(NULL, &p, attr->value.sequence->length);
 }