Fix infinite loop in CMS
authorDr. Stephen Henson <steve@openssl.org>
Fri, 5 Jun 2015 11:11:25 +0000 (12:11 +0100)
committerMatt Caswell <matt@openssl.org>
Thu, 11 Jun 2015 14:10:48 +0000 (15:10 +0100)
commit857b2ced04be897488df311a257f254ad8516429
tree765f72d1f46305fb081884f8770c0eda5a3eddaf
parent809bf2eab7b46e2fd768fec0c28127991c927b19
Fix infinite loop in CMS

Fix loop in do_free_upto if cmsbio is NULL: this will happen when attempting
to verify and a digest is not recognised. Reported by Johannes Bauer.

CVE-2015-1792

Reviewed-by: Matt Caswell <matt@openssl.org>
crypto/cms/cms_smime.c