b746aa3fe0
TS_OBJ_print_bio() misuses OBJ_txt2obj: it should print the result
as a null terminated buffer. The length value returned is the total
length the complete text reprsentation would need not the amount of
data written.
CVE-2016-2180
Thanks to Shi Lei for reporting this bug.
Reviewed-by: Matt Caswell <matt@openssl.org>
(cherry picked from commit
|
||
---|---|---|
.. | ||
Makefile | ||
ts.h | ||
ts_asn1.c | ||
ts_conf.c | ||
ts_err.c | ||
ts_lib.c | ||
ts_req_print.c | ||
ts_req_utils.c | ||
ts_rsp_print.c | ||
ts_rsp_sign.c | ||
ts_rsp_utils.c | ||
ts_rsp_verify.c | ||
ts_verify_ctx.c |