Add checks to X509_NAME_oneline()
authorDr. Stephen Henson <steve@openssl.org>
Thu, 28 Apr 2016 18:45:44 +0000 (19:45 +0100)
committerDr. Stephen Henson <steve@openssl.org>
Fri, 29 Apr 2016 18:42:21 +0000 (19:42 +0100)
commit77076dc944f76e821e4eae3a6563b853ce00c0ed
tree9860d1901021d2423d8e1d0fef028d2591fc6740
parentb33d1141b6dcce947708b984c5e9e91dad3d675d
Add checks to X509_NAME_oneline()

Sanity check field lengths and sums to avoid potential overflows and reject
excessively large X509_NAME structures.

Issue reported by Guido Vranken.

Reviewed-by: Matt Caswell <matt@openssl.org>
crypto/x509/x509_err.c
crypto/x509/x509_obj.c
include/openssl/x509.h