[openssl/openssl] 8ddace: Add negative integer check when using ASN1_BIT_STRING

Martin Litre noreply at github.com
Wed May 3 23:10:59 UTC 2023


  Branch: refs/heads/OpenSSL_1_1_1-stable
  Home:   https://github.com/openssl/openssl
  Commit: 8ddacec11481a37302c19f4454e23299af399f83
      https://github.com/openssl/openssl/commit/8ddacec11481a37302c19f4454e23299af399f83
  Author: mlitre <martinlitre at mac.com>
  Date:   2023-05-04 (Thu, 04 May 2023)

  Changed paths:
    M crypto/asn1/a_bitstr.c

  Log Message:
  -----------
  Add negative integer check when using ASN1_BIT_STRING

The negative integer check is done to prevent potential overflow.
Fixes #20719.

CLA: trivial

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Paul Dale <pauli at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20862)

(cherry picked from commit 1258a8e4361320cd3cfaf9ede692492ce01034c8)




More information about the openssl-commits mailing list