[gnutls-devel] libtasn1 | Fix endless loop in _asn1_check_identifier() (!23)

Development of GNU's TLS library gnutls-devel at lists.gnutls.org
Fri Jul 19 15:08:54 CEST 2019




Tim Rühsen commented on a discussion on tests/Makefile.am: https://gitlab.com/gnutls/libtasn1/merge_requests/23#note_193765890

>  	strict-der Test_choice_ocsp decoding decoding-invalid-x509 \
>  	ocsp-basic-response octet-string coding-long-oid object-id-decoding \
>  	spc_pe_image_data decoding-invalid-pkcs7 coding setof \
> -	CVE-2018-1000654 parser.sh
> +	CVE-2018-1000654 parser.sh endless_loop

Basically the endless loop happens on a node with up,down,right(,left) fields being NULL. That is IMO a tree with just single node. Should we call it 'single_node' then ?

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/libtasn1/merge_requests/23#note_193765890
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20190719/2b734ff1/attachment.html>


More information about the Gnutls-devel mailing list