artulab
projects / openbsd / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 9da016e) | patch
Convert X509v3_adr_get_afi() to CBS
authortb <tb@openbsd.org>
Tue, 28 Dec 2021 15:49:11 +0000 (15:49 +0000)
committertb <tb@openbsd.org>
Tue, 28 Dec 2021 15:49:11 +0000 (15:49 +0000)
commitefb484e86f138b6e503aaecd54723db297a3576d
tree28a3c62d1848e894d645795c32e3e81ea2a6e690tree | snapshot
parent9da016ebff542c1137cfb742dd2683974f86929bcommit | diff
Convert X509v3_adr_get_afi() to CBS

The manual byte bashing is performed more safely using this API
which would have avoided the out-of-bounds read that this API had
until a few years back.

The API is somewhat strange in that it uses the reserved AFI 0 as an
in-band error but it doesn't care about the reserved AFI 65535.

ok inoguchi jsing
lib/libcrypto/x509/x509_addr.c diff | blob | history
OpenBSD src
by Ahmet Artu Yildirim