Skip to main content
Revision b2688c91613566db1f42edd4b45f6e17146531b9 authored by Matt Caswell on 03 January 2015, 00:54:35 UTC, committed by Matt Caswell on 08 January 2015, 14:14:29 UTC
Follow on from CVE-2014-3571. This fixes the code that was the original source
of the crash due to p being NULL. Steve's fix prevents this situation from
occuring - however this is by no means obvious by looking at the code for
dtls1_get_record. This fix just makes things look a bit more sane.

Conflicts:
	ssl/d1_pkt.c

Reviewed-by: Dr Stephen Henson <steve@openssl.org>
1 parent bf6fa20
Raw File
Sssrsa.cnf
#
# SSLeay example configuration file.
# This is mostly being used for generation of certificate requests.
#
# create RSA certs - Server

RANDFILE              = ./.rnd

####################################################################
[ req ]
distinguished_name    = req_distinguished_name
encrypt_key           = no

[ req_distinguished_name ]
countryName                   = Country Name (2 letter code)
countryName_default           = ES
countryName_value             = ES

organizationName                = Organization Name (eg, company)
organizationName_value          = Tortilleras S.A.

0.commonName                  = Common Name (eg, YOUR name)
0.commonName_value            = Torti

1.commonName                  = Common Name (eg, YOUR name)
1.commonName_value            = Gordita
back to top