[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: _asn1_expand_object_id uses null pointer as string
From: |
Nikos Mavrogiannopoulos |
Subject: |
Re: _asn1_expand_object_id uses null pointer as string |
Date: |
Fri, 8 Apr 2016 13:53:50 +0200 |
On Thu, Apr 7, 2016 at 12:03 PM, Pascal Cuoq <address@hidden> wrote:
> Here is a minor issue with no security consequences (the description file is
> not usually under the control of an attacker).
> With the specially crafted ASN.1 description attached to this message, using
> the current git version, the function _asn1_expand_object_id, at line 797,
> passes a null pointer as p4->value to the function _asn1_str_cat, which
> expects a pointer to a string:
> http://git.savannah.gnu.org/cgit/libtasn1.git/tree/lib/parser_aux.c?id=a6e0a0b58f5cdaf4e9beca5bce69c09808cbb625#n797
Thank you. I've committed a fix to the issue.
regards,
Nikos