Correct a 1 byte read overflow in x509_contraints_uri and add

regress to catch it in the future.

found by Guido Vranken's cryptofuzzer

ok tb@

1 files changed, 4 insertions, 0 deletions

diff --git a/src/regress/lib/libcrypto/x509/constraints.c b/src/regress/lib/libcrypto/x509/constraints.c
index 86ed8faf14..6e76f08113 100644
--- a/src/regress/lib/libcrypto/x509/constraints.c
+++ b/src/regress/lib/libcrypto/x509/constraints.c
@@ -152,6 +152,10 @@ unsigned char *invaliduri[] = {
         "https://.www.openbsd.org/",
         "https://www.ope|nbsd.org%",
         "https://www.openbsd.org.#",
+        "///",
+        "//",
+        "/",
+        "",
         NULL,
 };