Ben Wiederhake 05d49cc0cb LibCrypto: Fix bound checks when reading bitmaps ...

This only affects malformed RSA keys. Instead of accepting and
continuing with potentially broken pointers (and in ASAN, crashing), we
now consider bitmaps malformed, and stop parsing.

Found by OSS Fuzz: #31698, long-standing-bug:
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31698

Fun fact: The "if" only exists because of OSS Fuzz.
8cc279ed74

2021-05-31 00:47:43 +04:30

13 KiB

Raw Blame History

View Raw