Skip to main content
Revision 9bc3665ac9e3c36f7762acd3691e1115d250b030 authored by Emilia Kasper on 08 April 2015, 14:56:43 UTC, committed by Matt Caswell on 11 June 2015, 13:52:39 UTC
Fix length checks in X509_cmp_time to avoid out-of-bounds reads.
Also tighten X509_cmp_time to reject more than three fractional
seconds in the time; and to reject trailing garbage after the offset.

CVE-2015-1789

Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
Reviewed-by: Richard Levitte <levitte@openssl.org>
1 parent aa5ab40
Raw File
testsslproxy
#! /bin/sh

echo 'Testing a lot of proxy conditions.'
echo 'Some of them may turn out being invalid, which is fine.'
for auth in A B C BC; do
    for cond in A B C 'A|B&!C'; do
	sh ./testssl $1 $2 $3 "-proxy -proxy_auth $auth -proxy_cond $cond"
	if [ $? = 3 ]; then exit 1; fi
    done
done
back to top