help-libtasn1
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: _asn1_expand_object_id uses null pointer as string


From: Nikos Mavrogiannopoulos
Subject: Re: _asn1_expand_object_id uses null pointer as string
Date: Fri, 8 Apr 2016 13:53:50 +0200

On Thu, Apr 7, 2016 at 12:03 PM, Pascal Cuoq <address@hidden> wrote:
> Here is a minor issue with no security consequences (the description file is 
> not usually under the control of an attacker).
> With the specially crafted ASN.1 description attached to this message, using 
> the current git version, the function _asn1_expand_object_id, at line 797, 
> passes a null pointer as p4->value to the function _asn1_str_cat, which 
> expects a pointer to a string: 
> http://git.savannah.gnu.org/cgit/libtasn1.git/tree/lib/parser_aux.c?id=a6e0a0b58f5cdaf4e9beca5bce69c09808cbb625#n797

Thank you. I've committed a fix to the issue.

regards,
Nikos



reply via email to

[Prev in Thread] Current Thread [Next in Thread]