[openssl-commits] Errored: openssl/openssl#13822 (OpenSSL_1_0_2-stable - 859a425)

[Travis CI]

Build Update for openssl/openssl
-------------------------------------

Build: #13822
Status: Errored

Duration: 7 hours, 4 minutes, and 54 seconds
Commit: 859a425 (OpenSSL_1_0_2-stable)
Author: David Benjamin
Message: Fix overflow in c2i_ASN1_BIT_STRING.

c2i_ASN1_BIT_STRING takes length as a long but uses it as an int.  Check
bounds before doing so. Previously, excessively large inputs to the
function could write a single byte outside the target buffer. (This is
unreachable as asn1_ex_c2i already uses int for the length.)

Thanks to NCC for finding this issue. Fix written by Martin Kreichgauer.

Reviewed-by: Richard Levitte <levitte at openssl.org>
Reviewed-by: Andy Polyakov <appro at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/4385)

(cherry picked from commit 6b1c8204b33aaedb7df7a009c241412839aaf950)

View the changeset: https://github.com/openssl/openssl/compare/772fc32bab58...859a42531acf

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/277459420?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20170920/b83aede1/attachment.html>