boringssl/util
David Benjamin fb2c6f8c85 ASN1_get_object should not accept large universal tags.
The high bits of the type get used for the V_ASN1_NEG bit, so when used with
ASN1_ANY/ASN1_TYPE, universal tags become ambiguous. This allows one to create
a negative zero, which should be impossible. Impose an upper bound on universal
tags accepted by crypto/asn1 and add a test.

BUG=590615

Change-Id: I363e01ebfde621c8865101f5bcbd5f323fb59e79
Reviewed-on: https://boringssl-review.googlesource.com/7238
Reviewed-by: Adam Langley <agl@google.com>
2016-02-29 21:17:19 +00:00
..
bot Chromium's update.sh is dead, long live update.py 2015-12-16 17:30:31 +00:00
32-bit-toolchain.cmake Inital import. 2014-06-20 13:17:32 -07:00
all_tests.go Markdown-ify BUILDING. 2015-09-03 18:38:21 +00:00
all_tests.json ASN1_get_object should not accept large universal tags. 2016-02-29 21:17:19 +00:00
doc.config Add X25519 and Ed25519 support. 2015-11-17 21:56:12 +00:00
doc.css Inital import. 2014-06-20 13:17:32 -07:00
doc.go Have doc.go parse struct comments. 2016-01-26 23:23:23 +00:00
generate_build_files.py Enable upstream's Poly1305 code. 2016-02-26 16:05:14 +00:00
make_errors.go Markdown-ify BUILDING. 2015-09-03 18:38:21 +00:00