openssl/crypto/ts
bonniegong effb0dcf86 Check the return value of ASN1_STRING_length
ASN1_STRING_length gets the field 'length' of msg, which
can be manipulated through a crafted input.
Add a check to avoid error execution of OPENSSL_malloc().

CLA: trivial

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/15583)
2021-06-03 17:09:02 +02:00
..
build.info
ts_asn1.c
ts_conf.c
ts_err.c err: rename err_load_xxx_strings_int functions 2021-05-26 13:01:47 +10:00
ts_lib.c
ts_local.h
ts_req_print.c
ts_req_utils.c
ts_rsp_print.c
ts_rsp_sign.c Rename all getters to use get/get0 in name 2021-06-01 12:40:00 +02:00
ts_rsp_utils.c
ts_rsp_verify.c Rename all getters to use get/get0 in name 2021-06-01 12:40:00 +02:00
ts_verify_ctx.c Check the return value of ASN1_STRING_length 2021-06-03 17:09:02 +02:00