kris/boringssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Don't try and verify signatures if key is NULL (CVE-2013-0166)

Browse Source 
Add additional check to catch this in ASN1_item_verify too.

(Imported from upstream's e9b4b8afbd129adc18d3fe71ca2ab34fe61d8640)
This commit is contained in:
Adam Langley 2014-06-20 12:00:00 -07:00
parent db4f9521b5
commit e2c2f60c44
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
crypto/x509/a_verify.c
View File

@ -81,6 +81,12 @@ int ASN1_item_verify(const ASN1_ITEM *it, X509_ALGOR *a,
int mdnid, pknid; int mdnid, pknid;
if (!pkey)
{
OPENSSL_PUT_ERROR(X509, ASN1_item_verify, ERR_R_PASSED_NULL_PARAMETER);
return 1;
}
EVP_MD_CTX_init(&ctx); EVP_MD_CTX_init(&ctx);
/* Convert signature OID into digest and public key OIDs */ /* Convert signature OID into digest and public key OIDs */