generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Properly check EVP_VerifyFinal() and similar return values

Browse Source 
(CVE-2008-5077).
Submitted by: Ben Laurie, Bodo Moeller, Google Security Team
This commit is contained in:
Dr. Stephen Henson
2009-01-07 10:48:23 +00:00
parent f4677b7960
commit a00c3c4019
11 changed files with 17 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
ssl/s2_clnt.c
View File

@@ -1044,7 +1044,7 @@ int ssl2_set_certificate(SSL *s, int type, int len, const unsigned char *data)
i=ssl_verify_cert_chain(s,sk);
if ((s->verify_mode != SSL_VERIFY_NONE) && (!i))
if ((s->verify_mode != SSL_VERIFY_NONE) && (i <= 0))
{
SSLerr(SSL_F_SSL2_SET_CERTIFICATE,SSL_R_CERTIFICATE_VERIFY_FAILED);
goto err;