David Benjamin 6195bf8242 Fix the type of x400Address in GENERAL_NAME
This fixes CVE-2023-0286.

The main impact is that GENERAL_NAME_cmp, when given x400Addresses, can
interpret a pointer with the wrong type. Applications that set
X509_V_FLAG_CRL_CHECK and take CRLs from untrusted sources should take
this patch.

Change-Id: Ib76265fa098df3cb0db075646773c14d59d0ca75
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/56985
Commit-Queue: Bob Beck <bbe@google.com>
Auto-Submit: David Benjamin <davidben@google.com>
Reviewed-by: Bob Beck <bbe@google.com>
(cherry picked from commit f219ae96be)
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/57165
2023-02-10 19:05:04 +00:00
2016-03-08 15:23:52 +00:00
2021-11-01 15:23:46 +00:00
2019-10-18 22:33:00 +00:00
S
Description
Pull-mirror boringssl.googlesource.com (пиннится spring/savanna как bssl)
Multiple Licenses 766 MiB
Languages
C++ 50.9%
C 17.1%
Go 12.2%
Raku 5.7%
Rust 4.9%
Other 9.2%