Emilia Kasper f48b83b4fb Fix length checks in X509_cmp_time to avoid out-of-bounds reads.
Also tighten X509_cmp_time to reject more than three fractional
seconds in the time; and to reject trailing garbage after the offset.

CVE-2015-1789

Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
Reviewed-by: Richard Levitte <levitte@openssl.org>
2015-06-11 11:06:30 +01:00
..
2015-06-06 13:17:06 +01:00
2015-06-04 09:23:02 +01:00
2015-06-09 12:39:08 -04:00
2015-06-10 11:03:20 +01:00
2015-06-09 12:39:08 -04:00
2015-04-20 15:06:22 +02:00
2014-06-04 08:34:18 +02:00
2015-01-22 09:20:09 +00:00