Fixed a minor vulnerability in which a malformed ASN.1 length field could cause a crash of the charon daemon if the verbose debug level 3 (raw hex dump) for the asn subsystem is enabled.
This commit is contained in:
@@ -160,6 +160,7 @@ METHOD(asn1_parser_t, iterate, bool,
|
|||||||
DBG1(DBG_ASN, "L%d - %s: length of ASN.1 object invalid or too large",
|
DBG1(DBG_ASN, "L%d - %s: length of ASN.1 object invalid or too large",
|
||||||
level, obj.name);
|
level, obj.name);
|
||||||
this->success = FALSE;
|
this->success = FALSE;
|
||||||
|
goto end;
|
||||||
}
|
}
|
||||||
|
|
||||||
blob1->ptr = blob->ptr;
|
blob1->ptr = blob->ptr;
|
||||||
|
|||||||
Reference in New Issue
Block a user