List Info

Thread: Re: (ITS#5010) broken ber_encode_oid/ber_decode_oid()




Re: (ITS#5010) broken ber_encode_oid/ber_decode_oid()
country flaguser name
United States
2007-06-19 05:25:30
h.b.furusethusit.uio.no wrote:
> I wrote:
>> Finally, libldap/tls.c does not check if
ber_decode_oid() fails.
> 
> Fixed that.  Waiting for the other stuff, depends on
the code's intent.
> 
Go ahead and fix whatever problems you see. Assume that
maliciously constructed 
cert DNs are present, because undoubtedly there will be.

-- 
   -- Howard Chu
   Chief Architect, Symas Corp.  http://www.symas.com
   Director, Highland Sun        http://highlandsun.com/hy
c/
   Chief Architect, OpenLDAP     http://www.openldap.
org/project/



[1]

about | contact  Other archives ( Real Estate discussion Medical topics )