denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

asn1: Fix handling of invalid ASN.1 length in is_asn1()

Browse Source 
Fixes CVE-2013-5018.
This commit is contained in:
Tobias Brunner
2013-07-31 22:16:58 +02:00
committed by Andreas Steffen
parent cc5bedbb98
commit b3393c88c1
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libstrongswan/asn1/asn1.c
+5
View File
@@ -642,6 +642,11 @@ bool is_asn1(chunk_t blob)
len = asn1_length(&blob);
if (len == ASN1_INVALID_LENGTH)
{
return FALSE;
}
/* exact match */
if (len == blob.len)
{