In asn1_d2i_read_bio, don't assume BIO_read will
return the requested number of bytes when reading
content.
diff --git a/CHANGES b/CHANGES
index 2d7c5b5..ce2c126 100644
--- a/CHANGES
+++ b/CHANGES
@@ -335,6 +335,11 @@
Changes between 0.9.6h and 0.9.7 [XX xxx 2002]
+ *) In asn1_d2i_read_bio() repeatedly call BIO_read() until all content
+ octets have been read, EOF or an error occurs. Without this change
+ some truncated ASN1 structures will not produce an error.
+ [Steve Henson]
+
*) Disable Heimdal support, since it hasn't been fully implemented.
Still give the possibility to force the use of Heimdal, but with
warnings and a request that patches get sent to openssl-dev.
