)]}'
{
  "commit": "ecca16632a73bb80ee27cdec8a97f6def0a4714d",
  "tree": "3f53c183fdc8db0eea571813c5e207fdeeb3eecb",
  "parents": [
    "9dd4ac8cf17f2afd636e85ae0111d1df4104a475"
  ],
  "author": {
    "name": "Rich Salz",
    "email": "rsalz@openssl.org",
    "time": "Tue Feb 21 13:07:13 2017 -0500"
  },
  "committer": {
    "name": "Rich Salz",
    "email": "rsalz@openssl.org",
    "time": "Tue Feb 21 13:07:13 2017 -0500"
  },
  "message": "Prevent OOB in SRP base64 code.\n\nChange size comparison from \u003e (GT) to \u003e\u003d (GTE) to ensure an additional\nbyte of output buffer, to prevent OOB reads/writes later in the function\nReject input strings larger than 2GB\nDetect invalid output buffer size and return early\n\nReviewed-by: Richard Levitte \u003clevitte@openssl.org\u003e\nReviewed-by: Rich Salz \u003crsalz@openssl.org\u003e\n(Merged from https://github.com/openssl/openssl/pull/2672)\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "188fad27e10e2c1db345858ff826dfb4668e89be",
      "old_mode": 33188,
      "old_path": "crypto/srp/srp_vfy.c",
      "new_id": "29b7afcb047b6f80401c8b61df937dde7c76b77a",
      "new_mode": 33188,
      "new_path": "crypto/srp/srp_vfy.c"
    }
  ]
}