freebsd-ports/security/polarssl13/files/patch-library-asn1parse_c
Jase Thew 4a3017391b security/polarssl13:
- Add upstream patch to address crafted certificates vulnerability
- Add USES cpe

MFH:		2015Q1
Security:	CVE-2015-1182
Security:	a5856eba-a015-11e4-a680-1c6f65c3c4ff
Approved by:	maintainer (chris@bsdjunk.com)
2015-01-22 17:28:10 +00:00

11 lines
356 B
Text

--- library/asn1parse.c.orig 2015-01-20 10:12:00.469677333 +0000
+++ library/asn1parse.c 2015-01-20 10:14:00.764667419 +0000
@@ -278,6 +278,8 @@
if( cur->next == NULL )
return( POLARSSL_ERR_ASN1_MALLOC_FAILED );
+ memset( cur->next, 0, sizeof( asn1_sequence ) );
+
cur = cur->next;
}
}