IABSD.fr/src/lib/libcrypto/ts

Branch : - branch - master - tag -

• Show log

  Commit

• Author : tb
  Date : 2026-01-27 14:18:32
  Hash : 2cb4d48e
  Message : Avoid type confusion in the timestamp response parsing A malformed v2 signing cert can lead to a type confusion, and the result is a read from an invalid memory address or NULL, so a crash. Unlike for OpenSSL, v1 signing certs aren't affected since miod fixed this in '14. Reported by Luigino Camastra, fix by Bob Beck, via OpenSSL, CVE 2025-69420. ok jsing

• Files
• ts.h
• ts_asn1.c
• ts_conf.c
• ts_err.c
• ts_lib.c
• ts_local.h
• ts_req_print.c
• ts_req_utils.c
• ts_rsp_print.c
• ts_rsp_sign.c
• ts_rsp_utils.c
• ts_rsp_verify.c
• ts_verify_ctx.c