diff options
| author | Emilia Kasper <emilia@openssl.org> | 2014-07-02 19:02:33 +0200 |
|---|---|---|
| committer | Matt Caswell <matt@openssl.org> | 2014-08-06 22:02:00 +0100 |
| commit | b9a73f5481fb8d5aac535622759cb0f632f39914 (patch) | |
| tree | db0d5fdff56a2563728fb7852c1d47902c9562b7 /NEWS | |
| parent | bff5319d9038765f864ef06e2e3c766f5c01dbd7 (diff) | |
Fix OID handling:
- Upon parsing, reject OIDs with invalid base-128 encoding.
- Always NUL-terminate the destination buffer in OBJ_obj2txt printing function.
CVE-2014-3508
Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
Reviewed-by: Kurt Roeckx <kurt@openssl.org>
Reviewed-by: Tim Hudson <tjh@openssl.org>
Diffstat (limited to 'NEWS')
0 files changed, 0 insertions, 0 deletions