diff options
| author | Dr. Stephen Henson <steve@openssl.org> | 2009-08-06 16:32:54 +0000 |
|---|---|---|
| committer | Dr. Stephen Henson <steve@openssl.org> | 2009-08-06 16:32:54 +0000 |
| commit | d9d0f1b52c570f0cc91ac5e8d1eb6a5bce4ba146 (patch) | |
| tree | 44d945494891928ab250e69e63b5969a8dd77426 /crypto/asn1/a_object.c | |
| parent | e075341d66cf35527b37e449a39de9b68cee6bcb (diff) | |
Reject leading 0x80 in OID subidentifiers.
Diffstat (limited to 'crypto/asn1/a_object.c')
| -rw-r--r-- | crypto/asn1/a_object.c | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/crypto/asn1/a_object.c b/crypto/asn1/a_object.c index f1a5a1e31e..bd2d5a2d82 100644 --- a/crypto/asn1/a_object.c +++ b/crypto/asn1/a_object.c @@ -290,6 +290,17 @@ ASN1_OBJECT *c2i_ASN1_OBJECT(ASN1_OBJECT **a, const unsigned char **pp, const unsigned char *p; unsigned char *data; int i; + /* Sanity check OID encoding: can't have 0x80 in subidentifiers, see: + * X.690 8.19.2 + */ + for (i = 0, p = *pp + 1; i < len - 1; i++, p++) + { + if (*p == 0x80) + { + ASN1err(ASN1_F_C2I_ASN1_OBJECT,ASN1_R_INVALID_OBJECT_ENCODING); + return NULL; + } + } /* only the ASN1_OBJECTs from the 'table' will have values * for ->sn or ->ln */ |