Commit d6d4ae45 authored by Joe Orton's avatar Joe Orton
Browse files

* modules/ssl/ssl_engine_kernel.c (ssl_callback_SSLVerify_CRL): Fix 

off-by-one.

PR: 35081
Submitted by: Marc Stern <mstern csc.com>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@179781 13f79535-47bb-0310-9956-ffa450edef68
parent ee10114e

CHANGES

+5 −0
Original line number Diff line number Diff line
@@ -2,6 +2,11 @@ Changes with Apache 2.1.5 














  [Remove entries to the current 2.0 section below, when backported]



























  *) SECURITY: CAN-2005-1268 (cve.mitre.org)













     mod_ssl: Fix possible crash on printing CRL details when













     debugging is enabled, if configured to use a CRL from













     a malicious source.  PR 35081.  [Marc Stern <mstern csc.com>]



























  *) proxy FTP: Fix confusion about globbing characters which could lead















     to getting a directory listing when a file was requested.  PR 34512.















     [Sean <infamous41md hotmail.com>]

































modules/ssl/ssl_engine_kernel.c



+1
−1






























Original line number
Diff line number
Diff line








@@ -1408,7 +1408,7 @@ int ssl_callback_SSLVerify_CRL(int ok, X509_STORE_CTX *ctx, conn_rec *c)













            BIO_printf(bio, ", nextUpdate: ");















            ASN1_UTCTIME_print(bio, X509_CRL_get_nextUpdate(crl));





























            n = BIO_read(bio, buff, sizeof(buff));













            n = BIO_read(bio, buff, sizeof(buff) - 1);















            buff[n] = '\0';































            BIO_free(bio);