1
Fork 0
mirror of https://github.com/RGBCube/serenity synced 2025-05-31 18:18:12 +00:00
serenity/Userland/Libraries/LibCrypto
Ben Wiederhake 0ca41d2813 LibCrypto: Don't crash in ASN1::parse_utc_time on missing 'Z'
The underlying reason is an unconditional call to consume(), even if
there is no reason to expect that the string continues.

This crash was discovered by OSS-Fuzz:
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42354
This bug exists since the code was first written in April 2021:
13abbc5ea8
2022-12-31 23:21:17 +01:00
..
ASN1 LibCrypto: Don't crash in ASN1::parse_utc_time on missing 'Z' 2022-12-31 23:21:17 +01:00
Authentication AK+Everywhere: Rename String to DeprecatedString 2022-12-06 08:54:33 +01:00
BigFraction Everywhere: Rename to_{string => deprecated_string}() where applicable 2022-12-06 08:54:33 +01:00
BigInt Everywhere: Use C++ concepts instead of requires clauses 2022-12-09 11:25:30 +00:00
Checksum Libraries: Use default constructors/destructors in LibCrypto 2022-03-10 18:04:26 -08:00
Cipher Everywhere: Rename to_{string => deprecated_string}() where applicable 2022-12-06 08:54:33 +01:00
Curves AK+Everywhere: Rename String to DeprecatedString 2022-12-06 08:54:33 +01:00
Hash AK+Everywhere: Rename String to DeprecatedString 2022-12-06 08:54:33 +01:00
NumberTheory Everywhere: Add sv suffix to strings relying on StringView(char const*) 2022-07-12 23:11:35 +02:00
PK AK+Everywhere: Rename String to DeprecatedString 2022-12-06 08:54:33 +01:00
CMakeLists.txt Everywhere: Mark dependencies of most targets as PRIVATE 2022-11-01 14:49:09 +00:00
Forward.h LibCrypto: Add the BigInteger concept 2021-12-22 11:27:31 +01:00
Verification.h AK+Userland: Use mpfard@serenityos.org for my copyright headers 2021-04-22 22:19:09 +02:00