diff options
| author | Neil Horman <nhorman@openssl.org> | 2024-01-02 15:48:00 -0500 |
|---|---|---|
| committer | Neil Horman <nhorman@openssl.org> | 2024-01-05 14:22:59 -0500 |
| commit | bdb3c6d6a2babb31bf145e3d0094e4b91b74c969 (patch) | |
| tree | cb4a0f8c07efc373890c4240293e12f7dc36acc9 /test/invalid-x509.cnf | |
| parent | f616d36a9d3ba8d48525a6da4805d9964ecd7c73 (diff) | |
Validate config options during x509 extension creation
There are several points during x509 extension creation which rely on
configuration options which may have been incorrectly parsed due to
invalid settings. Preform a value check for null in those locations to
avoid various crashes/undefined behaviors
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23183)
(cherry picked from commit bac7e687d71b124b09ad6ad3e15be9b38c08a1ba)
Diffstat (limited to 'test/invalid-x509.cnf')
| -rw-r--r-- | test/invalid-x509.cnf | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/test/invalid-x509.cnf b/test/invalid-x509.cnf new file mode 100644 index 0000000000..f982edb979 --- /dev/null +++ b/test/invalid-x509.cnf @@ -0,0 +1,6 @@ +[ext] +issuerSignTool = signTool +sbgp-autonomousSysNum = AS +issuingDistributionPoint = fullname +sbgp-ipAddrBlock = IPv4-SAFI + |