Check that multi-strings/CHOICE types don't use implicit tagging
authorMatt Caswell <matt@openssl.org>
Thu, 12 Nov 2020 11:58:12 +0000 (11:58 +0000)
committerMatt Caswell <matt@openssl.org>
Tue, 8 Dec 2020 10:17:03 +0000 (10:17 +0000)
commit43a7033a010feaf72c79d39df65ca733fb9dcd4c
tree27d000937ccaeea29446a7f40f834c854b3bbf0a
parentb33c48b75aaf33c93aeda42d7138616b9e6a64cb
Check that multi-strings/CHOICE types don't use implicit tagging

It never makes sense for multi-string or CHOICE types to use implicit
tagging since the content would be ambiguous. It is an error in the
template if this ever happens. If we detect it we should stop parsing.

Thanks to David Benjamin from Google for reporting this issue.

Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
crypto/asn1/asn1_err.c
crypto/asn1/tasn_dec.c
crypto/err/openssl.txt
include/openssl/asn1err.h