| commit | 1cfd255c9123cdb4637cc9a65c6665fe4a06c6d5 | [log] [tgz] |
|---|---|---|
| author | Dr. Stephen Henson <steve@openssl.org> | Thu Sep 25 23:28:48 2014 +0100 |
| committer | Dr. Stephen Henson <steve@openssl.org> | Mon Sep 29 12:01:05 2014 +0100 |
| tree | 86e26adccb01a6f970de107123649ea51c055d91 | |
| parent | 3d81ec5b92e1141762eb72caf2aeb9b2cd019a78 [diff] |
Add additional DigestInfo checks. Reencode DigestInto in DER and check against the original: this will reject any improperly encoded DigestInfo structures. Note: this is a precautionary measure, there is no known attack which can exploit this. Thanks to Brian Smith for reporting this issue. Reviewed-by: Tim Hudson <tjh@openssl.org>