diff options
| author | jsing <> | 2022-07-30 13:42:25 +0000 |
|---|---|---|
| committer | jsing <> | 2022-07-30 13:42:25 +0000 |
| commit | 2fbb23904f84edcbeba01b273bff5c8fb605f564 (patch) | |
| tree | 089cb6d64c531aa03fcb07b3b53bb1e713556c68 /src/lib/libssl/ssl_seclevel.c | |
| parent | 1dc2e65d098d6b432c6aec3f1e0446795467eb24 (diff) | |
| download | openbsd-2fbb23904f84edcbeba01b273bff5c8fb605f564.tar.gz openbsd-2fbb23904f84edcbeba01b273bff5c8fb605f564.tar.bz2 openbsd-2fbb23904f84edcbeba01b273bff5c8fb605f564.zip | |
Use ASN1_INTEGER to encode/decode BIGNUM_it.
The current code simply shoves the unvalidated ASN.1 bytes into a BIGNUM on
the hope that other things will detect issues (such as negative values
being flipped to positive). Instead of doing this, decode and validate the
ASN.1 data using ASN1_INTEGER, then convert it to a BIGNUM. Similarly, for
encoding convert from BIGNUM to ASN1_INTEGER and use ASN1_INTEGER encoding.
ok tb@
Diffstat (limited to 'src/lib/libssl/ssl_seclevel.c')
0 files changed, 0 insertions, 0 deletions