]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
Don't leak information via uninitialized space in db(3) records. [09:07]
authorcperciva <cperciva@FreeBSD.org>
Wed, 22 Apr 2009 14:07:14 +0000 (14:07 +0000)
committercperciva <cperciva@FreeBSD.org>
Wed, 22 Apr 2009 14:07:14 +0000 (14:07 +0000)
commit442576453cc61304ae20ccff415b95cd3fab8407
treea4ece9f894be453490cc1a1aa125e9f7f7528b04
parent1e1e6fe1889c15f6663a2529d7c1d5f9e85dcd57
Don't leak information via uninitialized space in db(3) records. [09:07]

Sanity-check string lengths in order to stop OpenSSL crashing
when printing corrupt BMPString or UniversalString objects. [09:08]

Security: FreeBSD-SA-09:07.libc
Security: FreeBSD-SA-09:08.openssl
Security: CVE-2009-0590
Approved by: re (kensmith)
Approved by: so (cperciva)
crypto/openssl/crypto/asn1/asn1.h
crypto/openssl/crypto/asn1/asn1_err.c
crypto/openssl/crypto/asn1/tasn_dec.c