lib/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2025-07-30 22:43:08 +03:00
Code Activity

Merge branch 'iotssl-1077-dos-crl'

Browse Source 
Modifies the function mbedtls_x509_crl_parse() to ensure that a CRL in PEM
format with trailing characters after the footer does not result in the
execution of an infinite loop.
This commit is contained in:
Simon Butcher
2017-02-26 01:16:02 +00:00
parent 9cfdf2caa7 a39db394db
commit 0278a38f10
5 changed files with 46 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
library/x509_crl.c
View File

@ -530,7 +530,7 @@ int mbedtls_x509_crl_parse( mbedtls_x509_crl *chain, const unsigned char *buf, s
mbedtls_pem_free( &pem );
}
else if( ret != MBEDTLS_ERR_PEM_NO_HEADER_FOOTER_PRESENT )
else if( is_pem )
{
mbedtls_pem_free( &pem );
return( ret );