Emilia Kasper fa57f74a39 Fix length checks in X509_cmp_time to avoid out-of-bounds reads.
Also tighten X509_cmp_time to reject more than three fractional
seconds in the time; and to reject trailing garbage after the offset.

CVE-2015-1789

Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
Reviewed-by: Richard Levitte <levitte@openssl.org>
2015-06-11 13:07:49 +01:00
..
2015-05-13 12:56:38 -04:00
2015-03-02 15:26:57 +00:00
2015-01-22 09:52:55 +00:00
2015-01-22 09:52:55 +00:00