]> git.feebdaed.xyz Git - 0xmirror/openssl.git/commit
ASN1: Reject negative BIGNUM components
authorDaniel Kubec <kubec@openssl.org>
Wed, 10 Dec 2025 12:57:40 +0000 (13:57 +0100)
committerTomas Mraz <tomas@openssl.org>
Fri, 12 Dec 2025 14:02:06 +0000 (15:02 +0100)
commitfed15f076fb22676208f70ec21b788589defd071
tree4636de5e8cb94957c0c4195f83afcea61e78e5f0
parent1c4f259e89e20f69df896aca1bf33e53325f56c2
ASN1: Reject negative BIGNUM components

In the ASN.1 structures we define the BIGNUM as positive and enforce
this during parsing. If the encoded value is negative, we raise an error
and reject the material.

Fixes #29210
Fixes #27407

Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29370)
crypto/asn1/x_bignum.c
test/crltest.c
test/testutil.h
test/testutil/load.c
test/x509_internal_test.c