[openssl.org #1407] Bug - add_cert_dir() logic is broken

2006-12-05 Thread Nils Larsch via RT
I agree with your patch = patch applied (0.9.8-stable and head). Please test a recent snapshot. Thanks, Nils __ OpenSSL Project http://www.openssl.org Development Mailing List

[openssl.org #1407] Bug - add_cert_dir() logic is broken

2006-10-10 Thread Tomas Mraz via RT
The add_cert_dir() function in openssl/crypto/x509/by_dir.c is broken. There is a loop to detect duplicate entries but its results are ignored, it will also go out of bounds on some malformed parameters. See also https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=206346 Patches against 0.9.8