denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

x509: Make sure the status in OCSP responses has the correct length

Browse Source
This commit is contained in:
Tobias Brunner
2023-11-24 17:41:18 +01:00
parent ebf5afcefa
commit 9c4846cdbe
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libstrongswan/plugins/x509/x509_ocsp_response.c
+4
View File
@@ -827,6 +827,10 @@ static bool parse_OCSPResponse(private_x509_ocsp_response_t *this)
switch (objectID) switch (objectID)
{ {
case OCSP_RESPONSE_STATUS: case OCSP_RESPONSE_STATUS:
if (object.len != 1)
{
goto end;
}
this->ocsp_status = (ocsp_status_t)*object.ptr; this->ocsp_status = (ocsp_status_t)*object.ptr;
switch (this->ocsp_status) switch (this->ocsp_status)
{ {