asn1_der_decoding API misuse
nmav at gnutls.org
Fri Jun 17 21:44:23 CEST 2011
On 06/16/2011 04:05 PM, Florian Weimer wrote:
> The comment in gnutls26-2.8.6/lib/minitasn1/decoding.c says this:
> * @errorDescription: null-terminated string contains details when an
> * error occurred.
> However, there are quite a few error returns without previous writes to
> the errorDescription buffer. Either the callers should be change to
> initialize the character buffer which is passed to asn1_der_decoding(),
> or asn1_der_decoding() should write an empty string to errorDescription
> if no description string is available.
Indeed. It should be fixed. I've added it to my todo list.
More information about the Gnutls-devel