diff options
| author | tb <> | 2022-01-04 20:17:07 +0000 |
|---|---|---|
| committer | tb <> | 2022-01-04 20:17:07 +0000 |
| commit | 6da8a2384aedc4bf32ae2540bf15c32ff1f208fe (patch) | |
| tree | 41e77008e192a5ddf738116c0af4c65c872f0282 /src/lib/libssl/t1_lib.c | |
| parent | a25565ae3b2b126c8949d6f47ebc3b98a26e4c7c (diff) | |
| download | openbsd-6da8a2384aedc4bf32ae2540bf15c32ff1f208fe.tar.gz openbsd-6da8a2384aedc4bf32ae2540bf15c32ff1f208fe.tar.bz2 openbsd-6da8a2384aedc4bf32ae2540bf15c32ff1f208fe.zip | |
Add a length check to make_addressPrefix()
Make the callers pass in the afi so that make_addressPrefix() can check
prefixlen to be reasonable. If the afi is anything else than IPv4 or
IPv6, cap its length at the length needed for IPv6. This way we avoid
arbitrary out-of-bounds reads if the caller decides to pass in something
stupid.
ok inoguchi jsing
Diffstat (limited to 'src/lib/libssl/t1_lib.c')
0 files changed, 0 insertions, 0 deletions