projects / oweals / openssl.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 39bcfb1) | patch
Fix infinite loop in CMS
authorDr. Stephen Henson <steve@openssl.org>
Fri, 5 Jun 2015 11:11:25 +0000 (12:11 +0100)
committerDr. Stephen Henson <steve@openssl.org>
Thu, 11 Jun 2015 12:07:42 +0000 (13:07 +0100)
commit92f9a8bf3844359bb50d86dab92bc24b074d350d
treed351cdbe1a1cc142bab16be49fbe3ca6a945dc17tree | snapshot
parent39bcfb129e816de00bf2170c3497e8104767beb7commit | diff
Fix infinite loop in CMS

Fix loop in do_free_upto if cmsbio is NULL: this will happen when attempting
to verify and a digest is not recognised. Reported by Johannes Bauer.

CVE-2015-1792

Reviewed-by: Matt Caswell <matt@openssl.org>
crypto/cms/cms_smime.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.