summaryrefslogtreecommitdiff
path: root/src/lib/libssl/ssl_methods.c
diff options
context:
space:
mode:
authortb <>2025-01-17 08:50:07 +0000
committertb <>2025-01-17 08:50:07 +0000
commit2b683d542e3fd3eddb68600c2c38c58c6341a332 (patch)
treeabeb9ab7392929638134ed9f420389664639a03d /src/lib/libssl/ssl_methods.c
parent7c8d3db53539fc8c79560e74c827a3f111dfd2c3 (diff)
downloadopenbsd-2b683d542e3fd3eddb68600c2c38c58c6341a332.tar.gz
openbsd-2b683d542e3fd3eddb68600c2c38c58c6341a332.tar.bz2
openbsd-2b683d542e3fd3eddb68600c2c38c58c6341a332.zip
Fix two incorrect strtonum() conversions
The atoi() would also accept the magic negative values and old openssl releases would expose these as arguments to -pkeyopt rsa_pss_saltlen:-1 in the openssl pkeyutl "app". While modern openssl switched to having readable alternatives to these, the oseid component of opensc would use the old syntax until yesterday. Still, this is our bug and we need to keep accepting the magic values as such, so do so. Everything below -3 will be rejected by the RSA_ctrl() handler later. Debugged by Doug Engert in https://github.com/OpenSC/OpenSC/issues/3317 ok jsing op
Diffstat (limited to 'src/lib/libssl/ssl_methods.c')
0 files changed, 0 insertions, 0 deletions