Hi, Brien,
I stumbled across the same bug and reported it on May 12th.
Stephen Henson replied:
...
Ouch! Negative ASN1 INTEGERs are pretty rare so this mustn't have been
checked too closely.
Anyway the problem seems to be that the ASN1 negative INTEGER encoding
stuff is completely broken. I'll look into it...
...
By the way: openssl 0.9.3a was released on May 29th.
How come your a_int.c file has an earlier date???
*** openssl-0.9.3a/crypto/asn1/a_int.c.orig Fri May 14 14:21:14 1999
--- openssl-0.9.3a/crypto/asn1/a_int.c Sun Jun 20 19:43:12 1999
Brien Wheeler wrote:
Help! I think there's a bug in (believe it or not) d2i_ASN1_INTEGER
which shows up with negative integers.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
