openssl/crypto/x509
Matt Caswell c7f8edfc11 Ensure that we check the ASN.1 type of an "otherName" before using it
We should not assume that the type of an ASN.1 value is UTF8String as
expected. We must actually check it, otherwise we could get a NULL ptr
deref, or worse memory errors.

Reported by David Benjamin.

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/16443)
2021-08-31 20:47:25 +10:00
..
build.info x509_trs.c: rename to x509_trust.c and correct comment in trust_compat() 2021-06-08 07:47:18 +02:00
by_dir.c
by_file.c Update copyright year 2021-05-20 14:22:33 +01:00
by_store.c
ext_dat.h
pcy_cache.c
pcy_data.c
pcy_lib.c
pcy_local.h
pcy_map.c
pcy_node.c
pcy_tree.c
standard_exts.h
t_crl.c
t_req.c
t_x509.c Fix a read buffer overrun in X509_aux_print(). 2021-07-20 09:40:56 +02:00
v3_addr.c x509: remove TODOs 2021-06-02 16:30:15 +10:00
v3_admis.c
v3_admis.h
v3_akeya.c
v3_akid.c Fix the error handling in i2v_AUTHORITY_KEYID 2021-08-24 14:22:07 +01:00
v3_asid.c
v3_bcons.c x509: remove TODOs 2021-06-02 16:30:15 +10:00
v3_bitst.c
v3_conf.c Avoid freeing the conf lhashes in X509_V3_EXT*_add_conf 2021-08-06 17:32:06 +02:00
v3_cpols.c Fix POLICYINFO printing to not assume NUL terminated strings 2021-08-24 14:22:06 +01:00
v3_crld.c
v3_enum.c
v3_extku.c
v3_genn.c
v3_ia5.c
v3_info.c
v3_int.c
v3_ist.c
v3_lib.c
v3_ncons.c Fix the name constraints code to not assume NUL terminated strings 2021-08-24 14:22:06 +01:00
v3_pci.c Fix printing of PROXY_CERT_INFO_EXTENSION to not assume NUL terminated strings 2021-08-24 14:22:06 +01:00
v3_pcia.c
v3_pcons.c
v3_pku.c
v3_pmaps.c
v3_prn.c
v3_purp.c Improve the documentation of cert path building and validation 2021-06-08 07:47:41 +02:00
v3_san.c Fix GENERAL_NAME_print to not assume NUL terminated strings 2021-08-24 14:22:06 +01:00
v3_skid.c
v3_sxnet.c
v3_tlsf.c
v3_utf8.c
v3_utl.c Ensure that we check the ASN.1 type of an "otherName" before using it 2021-08-31 20:47:25 +10:00
v3err.c Update copyright year 2021-06-17 13:24:59 +01:00
x509_att.c
x509_cmp.c x509: improve error reporting 2021-06-30 13:53:49 +10:00
x509_d2.c
x509_def.c
x509_err.c Update copyright year 2021-06-17 13:24:59 +01:00
x509_ext.c
x509_local.h
x509_lu.c x509: remove TODOs 2021-06-02 16:30:15 +10:00
x509_meth.c
x509_obj.c
x509_r2x.c
x509_req.c
x509_set.c Rename all getters to use get/get0 in name 2021-06-01 12:40:00 +02:00
x509_trust.c x509_trs.c: rename to x509_trust.c and correct comment in trust_compat() 2021-06-08 07:47:18 +02:00
x509_txt.c
x509_v3.c
x509_vfy.c cross-reference the DH and RSA SECLEVEL to level of security mappings 2021-06-23 09:26:15 +10:00
x509_vpm.c
x509cset.c
x509name.c
x509rset.c
x509spki.c
x509type.c Update copyright year 2021-06-17 13:24:59 +01:00
x_all.c X509_digest_sig(): Improve default hash for EdDSA and allow to return the chosen default 2021-06-16 14:30:35 +01:00
x_attrib.c
x_crl.c
x_exten.c
x_name.c
x_pubkey.c coverity #1486531: return error properly from x509_pubkey_ex_new_ex() 2021-06-29 18:41:45 +02:00
x_req.c Ensure libctx/propq is propagated when handling X509_REQ 2021-06-05 17:39:27 +10:00
x_x509.c d2i_X509: revert calling X509v3_cache_extensions() 2021-06-12 10:37:04 +02:00
x_x509a.c Update copyright year 2021-07-29 15:41:35 +01:00