Commit 01c32b5e authored by Dr. Stephen Henson's avatar Dr. Stephen Henson
Browse files

Don't shift serial number into sign bit 



Reviewed-by: default avatarRich Salz <rsalz@openssl.org>
parent bd34ecba

crypto/asn1/t_x509.c

+2 −1
Original line number Diff line number Diff line
@@ -140,7 +140,8 @@ int X509_print_ex(BIO *bp, X509 *x, unsigned long nmflags, 
            goto err;



        bs = X509_get_serialNumber(x);

        if (bs->length <= (int)sizeof(long)) {

        if (bs->length < (int)sizeof(long)

            || (bs->length == sizeof(long) && (bs->data[0] & 0x80) == 0)) {

            l = ASN1_INTEGER_get(bs);

            if (bs->type == V_ASN1_NEG_INTEGER) {

                l = -l;