openssl

0 Fork 0

mirror of https://github.com/openssl/openssl.git synced 2026-10-29 08:56:08 +08:00

Files

T

History

Daniel Kubec 0e2a7f2338 apps/lib/cmp_mock_srv.c: Fix NULL dereference of ASN1_INTEGER in refcert_cmp()

The issuer and the serialNumber are independently OPTIONAL
in a CertTemplate.  A component absent from the request cannot confirm
a match with the reference cert, and ASN1_INTEGER_cmp() does not accept
NULL, so require each component the reference cert has to be present
in the request and to be equal.

Fixes: 66be663b64 "cmp_mock_srv.c: Add missing OldCertID check for 'kur' cert update requests"
References: b971d4198d "CMP mock server: add -ref_cert option and corresponding ossl_cmp_mock_srv_set1_refCert()"
Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
Reviewed-by: Mounir Idrassi <mounir.idrassi@idrix.fr>
Reviewed-by: Eugene Syromiatnikov <esyr@openssl.org>
Merge-date: Sat Oct 24 09:44:19 2026
Merged-from: https://github.com/openssl/openssl/pull/33071

2026-10-24 11:42:53 +02:00

app_libctx.c

4.0-POST-CLANG-FORMAT-WEBKIT

2025-12-09 00:28:19 -07:00

app_params.c

Convert BIO_snprintf() usage in describe_param_type()

2026-08-26 12:20:02 -04:00

app_provider.c

2026-09-09 13:12:46 +00:00

app_rand.c

2026-03-10 14:37:52 +00:00

app_x509.c