artulab
projects / openbsd / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: b6505d5) | patch
Fix length check of IP addresses for name constraints
authortb <tb@openbsd.org>
Fri, 11 Feb 2022 17:41:55 +0000 (17:41 +0000)
committertb <tb@openbsd.org>
Fri, 11 Feb 2022 17:41:55 +0000 (17:41 +0000)
commitb92d1435fff2c7279bde78ccaab6581664ce630e
treed6bff6372df4417965ad38761a0e7781f46f738btree | snapshot
parentb6505d5ce728b9d71d50e3630491b4b6ff55357ecommit | diff
Fix length check of IP addresses for name constraints

An IP address in a name constraint is actually an IP address concatenated
with a netmask, so it is twice as long as usual.

This fixes a third bug introduced in r1.3 and reported by Volker Schlecht

ok jsing
lib/libcrypto/x509/x509_alt.c diff | blob | history
OpenBSD src
by Ahmet Artu Yildirim