Skip to main content
Revision 03b04ddac162c7b7fa3c57eadccc5a583a00d291 authored by Emilia Kasper on 02 July 2014, 17:02:33 UTC, committed by Matt Caswell on 06 August 2014, 19:27:51 UTC
Fix OID handling:
- Upon parsing, reject OIDs with invalid base-128 encoding.
- Always NUL-terminate the destination buffer in OBJ_obj2txt printing function.

CVE-2014-3508

Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
Reviewed-by: Kurt Roeckx <kurt@openssl.org>
Reviewed-by: Tim Hudson <tjh@openssl.org>
1 parent 88ae012
Raw File
openssl_button.html

<!-- the `Includes OpenSSL Cryptogaphy Software' button      -->
<!-- freely usable by any application linked against OpenSSL -->
<a   href="http://www.openssl.org/">
<img src="openssl_button.gif" 
     width=102 height=47 border=0></a>
back to top