]> CyberLeo.Net >> Repos - FreeBSD/releng/7.2.git/commit
Don't leak information via uninitialized space in db(3) records. [09:07]
authorcperciva <cperciva@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f>
Wed, 22 Apr 2009 14:07:14 +0000 (14:07 +0000)
committercperciva <cperciva@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f>
Wed, 22 Apr 2009 14:07:14 +0000 (14:07 +0000)
commit4d72c44be29d5fce5a29a0627277f0943a782481
tree973260507ebb437f50781613b98205d713d315dc
parented5abc96fddc73cd36c8ebfc3b48893c4c84dddb
Don't leak information via uninitialized space in db(3) records. [09:07]

Sanity-check string lengths in order to stop OpenSSL crashing
when printing corrupt BMPString or UniversalString objects. [09:08]

Security: FreeBSD-SA-09:07.libc
Security: FreeBSD-SA-09:08.openssl
Security: CVE-2009-0590
Approved by: re (kensmith)
Approved by: so (cperciva)

git-svn-id: svn://svn.freebsd.org/base/releng/7.2@191381 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f
UPDATING
crypto/openssl/crypto/asn1/asn1.h
crypto/openssl/crypto/asn1/asn1_err.c
crypto/openssl/crypto/asn1/tasn_dec.c