Skip to content

Fix: Unchecked buffer overrun when adding Cert Directory - #11269

Open
aidankeefe2022 wants to merge 1 commit into
wolfSSL:masterfrom
aidankeefe2022:fenrir-10736
Open

Fix: Unchecked buffer overrun when adding Cert Directory#11269
aidankeefe2022 wants to merge 1 commit into
wolfSSL:masterfrom
aidankeefe2022:fenrir-10736

Conversation

@aidankeefe2022

Copy link
Copy Markdown
Member

Description

Added a check to make sure buffer cannot be over run by an extra long directory path.

Fenrir fix: https://fenrir.wolfssl.com/finding/10736

Testing

Made a test that loads string of correct size and one of correct size + 1.

Checklist

  • added tests

@wolfSSL-Fenrir-bot wolfSSL-Fenrir-bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fenrir Automated Review — PR #11269

Scan targets checked: wolfcrypt-rs-bugs, wolfssl-bugs, wolfssl-src

Findings: 3
3 finding(s) posted as inline comments (see file-level comments below)

This review was generated automatically by Fenrir. Reported findings require changes before merge.

@wolfSSL-Bot

Copy link
Copy Markdown

Can one of the admins verify this patch?

@wolfSSL-Fenrir-bot wolfSSL-Fenrir-bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fenrir Automated Review — PR #11269

Scan targets checked: wolfcrypt-rs-bugs, wolfssl-bugs, wolfssl-src

Findings: 3
3 finding(s) posted as inline comments (see file-level comments below)

This review was generated automatically by Fenrir. Reported findings require changes before merge.

Comment thread tests/api/test_ossl_x509_lu.c Outdated
Comment thread src/x509.c Outdated
Comment thread tests/api/test_ossl_x509_lu.c Outdated
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants