cuberite/polarssl
1
0
Fork 0
mirror of https://github.com/cuberite/polarssl.git synced 2025-09-27 23:38:44 -04:00
Code Issues Packages Projects Releases Wiki Activity

Reject null bytes in DER encoded values in DNs

Browse Source 
Signed-off-by: Agathiyan Bragadeesh <agathiyan.bragadeesh2@arm.com>
This commit is contained in:
Agathiyan Bragadeesh 2023-08-14 16:32:22 +01:00
parent eb55867520
commit f826d1113e
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
library/x509_create.c
View File

@ -239,6 +239,9 @@ static int parse_attribute_value_ber_encoded(const char *s,
if ((c + 1 >= end) || (n = hexpair_to_int(*c, *(c+1))) == -1) { if ((c + 1 >= end) || (n = hexpair_to_int(*c, *(c+1))) == -1) {
return MBEDTLS_ERR_X509_INVALID_NAME; return MBEDTLS_ERR_X509_INVALID_NAME;
} }
if (MBEDTLS_ASN1_IS_STRING_TAG(*tag) && n == 0) {
return MBEDTLS_ERR_X509_INVALID_NAME;
}
*(p++) = n; *(p++) = n;
} }
asn1_der_end = p; asn1_der_end = p;