Bug #165

ASN1 parser date overflows

Added by Erick Turnquist 5 months ago. Updated 4 months ago.

Status:Closed Start date:20.12.2011
Priority:Normal Due date:
Assignee:Tobias Brunner % Done:

0%
Category:libstrongswan
Target version:4.6.2
Affected version:4.6.1 Resolution:

Description

I have discovered some C casting errors that cause extremely large ASN1 dates to overflow and go undetected. Attached to this issue is a patch to correct the errors I found. This will turn this incorrect expiration date:

not after Sep 02 01:04:44 1975, expired (13258 days ago)

into

not after Oct 09 07:33:00 2111, ok

asn1-date-overflow.patch (870 Bytes) Erick Turnquist, 20.12.2011 10:08

History

#1
Updated by Tobias Brunner 5 months ago

  • Category set to libstrongswan
  • Status changed from New to Resolved
  • Assignee set to Tobias Brunner
  • Target version set to 4.6.2

Hi Erick,

Thanks for the report. Fixed in master.

Regards,
Tobias

#2
Updated by Tobias Brunner 4 months ago

  • Status changed from Resolved to Closed

Also available in: Atom PDF