diff options
| author | tb <> | 2024-01-01 18:33:04 +0000 |
|---|---|---|
| committer | tb <> | 2024-01-01 18:33:04 +0000 |
| commit | 9812b741aad62722b8886907a81243c5c70ae750 (patch) | |
| tree | 425ef6fa1a717909769f40672bb3331213c27771 /src/lib/libssl/ssl_ciph.c | |
| parent | e4fbd68db1b791490c43f96946a1bbfcdcacdc35 (diff) | |
| download | openbsd-9812b741aad62722b8886907a81243c5c70ae750.tar.gz openbsd-9812b741aad62722b8886907a81243c5c70ae750.tar.bz2 openbsd-9812b741aad62722b8886907a81243c5c70ae750.zip | |
Fix bounds check in EVP_PKEY_CTX_get_keygen_info()
Replace > with >= for the upper array bound to disallow a 4 byte
overread. For RSA you can read the padding mode and for DH past
the DH_PKEY_CTX. Unfortunately, Ruby thought it important to use
this, so we can't kill it easily.
ok miod
Diffstat (limited to 'src/lib/libssl/ssl_ciph.c')
0 files changed, 0 insertions, 0 deletions