CVSROOT:        /cvs
Module name:    src
Changes by:     t...@cvs.openbsd.org    2023/03/10 02:44:54

Modified files:
        usr.bin/openssl: asn1pars.c 

Log message:
openssl(1) asn1parse: avoid crash with ASN.1 BOOLEANS

When pointing openssl asn1parse -strparse at DER octets 01 01, it crashes:

$ printf '<\x01\x01>' | openssl asn1parse -inform der -strparse 1

Refuse to parse BOOLEAN types instead, which avoids a crash in hensonian
/* hmm... this is a little evil, but it works */ code.

Found while poking at CMS timestamps to understand one of job's diffs.

with/ok jsing

Reply via email to