Reject empty generation strings.
Reported by Hanno Böck <hanno@hboeck.de> Reviewed-by: Rich Salz <rsalz@openssl.org>
This commit is contained in:
parent
c4137b5e82
commit
111b60bea0
@ -167,8 +167,10 @@ static ASN1_TYPE *generate_v3(char *str, X509V3_CTX *cnf, int depth,
|
|||||||
asn1_tags.imp_class = -1;
|
asn1_tags.imp_class = -1;
|
||||||
asn1_tags.format = ASN1_GEN_FORMAT_ASCII;
|
asn1_tags.format = ASN1_GEN_FORMAT_ASCII;
|
||||||
asn1_tags.exp_count = 0;
|
asn1_tags.exp_count = 0;
|
||||||
if (CONF_parse_list(str, ',', 1, asn1_cb, &asn1_tags) != 0)
|
if (CONF_parse_list(str, ',', 1, asn1_cb, &asn1_tags) != 0) {
|
||||||
|
*perr = ASN1_R_UNKNOWN_TAG;
|
||||||
return NULL;
|
return NULL;
|
||||||
|
}
|
||||||
|
|
||||||
if ((asn1_tags.utype == V_ASN1_SEQUENCE)
|
if ((asn1_tags.utype == V_ASN1_SEQUENCE)
|
||||||
|| (asn1_tags.utype == V_ASN1_SET)) {
|
|| (asn1_tags.utype == V_ASN1_SET)) {
|
||||||
@ -298,7 +300,7 @@ static int asn1_cb(const char *elem, int len, void *bitstr)
|
|||||||
int tmp_tag, tmp_class;
|
int tmp_tag, tmp_class;
|
||||||
|
|
||||||
if (elem == NULL)
|
if (elem == NULL)
|
||||||
return 0;
|
return -1;
|
||||||
|
|
||||||
for (i = 0, p = elem; i < len; p++, i++) {
|
for (i = 0, p = elem; i < len; p++, i++) {
|
||||||
/* Look for the ':' in name value pairs */
|
/* Look for the ':' in name value pairs */
|
||||||
|
Loading…
x
Reference in New Issue
Block a user