[[EMAIL PROTECTED] - Fri Aug 16 13:44:38 2002]:
> "Unchecked return from gmtime in ASN1 time set routine can cause core > dump on > Windows" [...] > Those hundred years in the -days argument seem to bee too much for > Windows. The > time value t in the > ASN1_UTCTIME *ASN1_UTCTIME_set(ASN1_UTCTIME *s, time_t t) > function (in crypto/asn1/a_utctm.c:192) runs over into the negative > (0xf954fcaf). > The subsequent call to > ts=gmtime(&t); > returns a NULL pointer. > > This pointer doesn't get checked and the following call to > sprintf(p,"%02d%02d%02d%02d%02d%02dZ",ts->tm_year%100, Absolutely correct. Beautiful analysis! Thanks for the report, I just fixed it the way you said we should (it's already there in 0.9.7). This ticket is now resolved. -- Richard Levitte [EMAIL PROTECTED] ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
