mirror of
https://github.com/openssl/openssl.git
synced 2025-01-06 13:26:43 +08:00
8a85df7c60
PKCS7 ContentInfo fields held within a PKCS12 file can be NULL, even if the type has been set to a valid value. CVE-2024-0727 is a result of OpenSSL attempting to dereference the NULL pointer as a result of this. We add test for various instances of this problem. Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Hugo Landau <hlandau@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/23361) |
||
---|---|---|
.. | ||
bad1.p12 | ||
bad2.p12 | ||
bad3.p12 |