Fixed a minor vulnerability in which a malformed ASN.1 length field could cause a crash of the charon daemon if the verbose debug level 3 (raw hex dump) for the asn subsystem is enabled.
This commit is contained in:
@@ -160,6 +160,7 @@ METHOD(asn1_parser_t, iterate, bool,
|
||||
DBG1(DBG_ASN, "L%d - %s: length of ASN.1 object invalid or too large",
|
||||
level, obj.name);
|
||||
this->success = FALSE;
|
||||
goto end;
|
||||
}
|
||||
|
||||
blob1->ptr = blob->ptr;
|
||||
|
||||
Reference in New Issue
Block a user