Skip to main content
Revision 9bc3665ac9e3c36f7762acd3691e1115d250b030 authored by Emilia Kasper on 08 April 2015, 14:56:43 UTC, committed by Matt Caswell on 11 June 2015, 13:52:39 UTC
Fix length checks in X509_cmp_time to avoid out-of-bounds reads.
Also tighten X509_cmp_time to reject more than three fractional
seconds in the time; and to reject trailing garbage after the offset.

CVE-2015-1789

Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
Reviewed-by: Richard Levitte <levitte@openssl.org>
1 parent aa5ab40
Raw File
GitConfigure
#!/bin/sh

BRANCH=`git rev-parse --abbrev-ref HEAD`

./Configure $@ no-symlinks
make files
util/mk1mf.pl OUT=out.$BRANCH TMP=tmp.$BRANCH INC=inc.$BRANCH copy > makefile.$BRANCH
make -f makefile.$BRANCH init
back to top