[git] KSBA - branch, master, updated. libksba-1.3.5-17-ga1ce3c1

[by Werner Koch]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "KSBA is a library to access X.509 certificates and CMS data.".

The branch, master has been updated
       via  a1ce3c17ee0d44ba8c7c9553824ba55b7950e930 (commit)
      from  d56bddc68db86878e1b3497362407c994c2841ca (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit a1ce3c17ee0d44ba8c7c9553824ba55b7950e930
Author: Werner Koch <wk at gnupg.org>
Date:   Tue Oct 23 22:44:01 2018 +0200

    Fix error detection in the CMS parser which may led to a NULL-deref.
    
    * src/cms.c (build_signed_data_rest): Fix c+p bug.
    --
    
    GnuPG-bug-id: 4207
    Signed-off-by: Werner Koch <wk at gnupg.org>

diff --git a/src/cms.c b/src/cms.c
index c0fac0f..1cca810 100644
--- a/src/cms.c
+++ b/src/cms.c
@@ -2777,7 +2777,7 @@ build_signed_data_rest (ksba_cms_t cms)
       assert (si->root);
       assert (si->image);
       n2 = _ksba_asn_find_node (si->root, "SignerInfo.signedAttrs");
-      if (!n2 || !n->down)
+      if (!n2 || !n2->down)
         {
 	  err = gpg_error (GPG_ERR_ELEMENT_NOT_FOUND);
 	  goto leave;

-----------------------------------------------------------------------

Summary of changes:
 src/cms.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)


hooks/post-receive
-- 
KSBA is a library to access X.509 certificates and CMS data.
http://git.gnupg.org