]> granicus.if.org Git - openssl/commit
projects / openssl / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 8aa556e) | patch
Fix infinite loop in CMS
authorDr. Stephen Henson <steve@openssl.org>
Fri, 5 Jun 2015 11:11:25 +0000 (12:11 +0100)
committerMatt Caswell <matt@openssl.org>
Thu, 11 Jun 2015 13:52:39 +0000 (14:52 +0100)
commitaa5ab40860deb3dc6d4d4c98a4efea99f7040a46
treeb212fc80bb346812f639fcad64b02d0d7e4ca811tree | snapshot
parent8aa556e1c3b49274ccae579cb584eb5b702a3b0ecommit | diff
Fix infinite loop in CMS

Fix loop in do_free_upto if cmsbio is NULL: this will happen when attempting
to verify and a digest is not recognised. Reported by Johannes Bauer.

CVE-2015-1792

Reviewed-by: Matt Caswell <matt@openssl.org>
crypto/cms/cms_smime.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.