diff options
| author | David Benjamin <davidben@google.com> | 2016-05-03 14:50:44 +0300 |
|---|---|---|
| committer | Adam Langley <agl@google.com> | 2016-05-03 19:34:59 +0300 |
| commit | 52a3bf2835200a7beabe349a85cb2355e42ab599 (patch) | |
| tree | c4be57c7a32bb81ffb476ac2924fc996a1b10dc1 /crypto/err | |
| parent | ddc69230f30ed53bf81e2e6755cb74f02f537b1a (diff) | |
Add checks to X509_NAME_oneline()
Sanity check field lengths and sums to avoid potential overflows and reject
excessively large X509_NAME structures.
Issue reported by Guido Vranken.
(Imported from upstream's 9b08619cb45e75541809b1154c90e1a00450e537.)
Change-Id: Ib2e1e7cd086f9c3f0d689d61947f8ec3e9220049
Reviewed-on: https://boringssl-review.googlesource.com/7842
Reviewed-by: Adam Langley <agl@google.com>
Diffstat (limited to 'crypto/err')
| -rw-r--r-- | crypto/err/x509.errordata | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/crypto/err/x509.errordata b/crypto/err/x509.errordata index a1d49b71..5687c30c 100644 --- a/crypto/err/x509.errordata +++ b/crypto/err/x509.errordata @@ -17,6 +17,7 @@ X509,115,KEY_TYPE_MISMATCH X509,116,KEY_VALUES_MISMATCH X509,117,LOADING_CERT_DIR X509,118,LOADING_DEFAULTS +X509,135,NAME_TOO_LONG X509,119,NEWER_CRL_NOT_NEWER X509,120,NOT_PKCS7_SIGNED_DATA X509,121,NO_CERTIFICATES_INCLUDED |