generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Make sure not to read beyond end of buffer

Browse Source
This commit is contained in:
Bodo Möller 2008-07-16 18:10:27 +00:00
parent 89778b7f3f
commit efa73a77e4
1 changed files with 7 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
crypto/asn1/t_x509.c
View File

@ -370,12 +370,13 @@ int ASN1_GENERALIZEDTIME_print(BIO *bp, const ASN1_GENERALIZEDTIME *tm)
d= (v[6]-'0')*10+(v[7]-'0'); d= (v[6]-'0')*10+(v[7]-'0');
h= (v[8]-'0')*10+(v[9]-'0'); h= (v[8]-'0')*10+(v[9]-'0');
m= (v[10]-'0')*10+(v[11]-'0'); m= (v[10]-'0')*10+(v[11]-'0');
if ( (v[12] >= '0') && (v[12] <= '9') && if (i >= 14 &&
(v[12] >= '0') && (v[12] <= '9') &&
(v[13] >= '0') && (v[13] <= '9')) (v[13] >= '0') && (v[13] <= '9'))
{ {
s= (v[12]-'0')*10+(v[13]-'0'); s= (v[12]-'0')*10+(v[13]-'0');
/* Check for fractions of seconds. */ /* Check for fractions of seconds. */
if (v[14] == '.') if (i >= 15 && v[14] == '.')
{ {
int l = tm->length; int l = tm->length;
f = &v[14]; /* The decimal point. */ f = &v[14]; /* The decimal point. */
@ -416,7 +417,8 @@ int ASN1_UTCTIME_print(BIO *bp, const ASN1_UTCTIME *tm)
d= (v[4]-'0')*10+(v[5]-'0'); d= (v[4]-'0')*10+(v[5]-'0');
h= (v[6]-'0')*10+(v[7]-'0'); h= (v[6]-'0')*10+(v[7]-'0');
m= (v[8]-'0')*10+(v[9]-'0'); m= (v[8]-'0')*10+(v[9]-'0');
if ( (v[10] >= '0') && (v[10] <= '9') && if (i >=12 &&
(v[10] >= '0') && (v[10] <= '9') &&
(v[11] >= '0') && (v[11] <= '9')) (v[11] >= '0') && (v[11] <= '9'))
s= (v[10]-'0')*10+(v[11]-'0'); s= (v[10]-'0')*10+(v[11]-'0');
@ -489,4 +491,3 @@ err:
OPENSSL_free(b); OPENSSL_free(b);
return(ret); return(ret);
} }