[openssl.org #534] BUG: Buffer overrun after calling X509_gmtime_adj

2003-03-11 Thread Tony Hoyle via RT
Hi, The example code that comes with openssl comes with a file 'selfsign.c' which I used to generate a key. I modified the line that calls X509_gmtime_adj to 100 years because I didn't care about key expiry (this is probably the wrong way to do it, but...). This generated a large negative ad

[openssl.org #534] BUG: Buffer overrun after calling X509_gmtime_adj

2003-03-11 Thread Stephen Henson via RT
[EMAIL PROTECTED] - Tue Mar 11 20:37:22 2003]: > Hi, > > The example code that comes with openssl comes with a file 'selfsign.c' > which I used to generate a key. I modified the line that calls > X509_gmtime_adj to 100 years because I didn't care about key expiry > (this is probably the wron

[openssl.org #534] BUG: Buffer overrun after calling X509_gmtime_adj

2003-03-13 Thread Stephen Henson via RT
[EMAIL PROTECTED] - Wed Mar 12 00:13:24 2003]: > Stephen Henson via RT wrote: > > > > > > > > Have you tried this in OpenSSL 0.9.7a? > > > I should have mentioned... this is with OpenSSL 0.9.7a. > > See o_time.c line 82: > > ts = gmtime(timer); > if (ts != NULL) > m

Re: [openssl.org #534] BUG: Buffer overrun after calling X509_gmtime_adj

2003-03-11 Thread Tony Hoyle via RT
Stephen Henson via RT wrote: > > > > Have you tried this in OpenSSL 0.9.7a? > I should have mentioned... this is with OpenSSL 0.9.7a. See o_time.c line 82: ts = gmtime(timer); if (ts != NULL) memcpy(result, ts, sizeof(struct tm)); ts = result; Essentia