Commit 8b0d4242 authored by Andy Polyakov's avatar Andy Polyakov
Browse files

apps/s_client.c: harden ldap_ExtendedResponse_parse. 



Reviewed-by: default avatarRich Salz <rsalz@openssl.org>
Reviewed-by: default avatarRichard Levitte <levitte@openssl.org>
parent 312e9387

apps/s_client.c

+2 −0
Original line number Diff line number Diff line
@@ -3091,6 +3091,8 @@ static int ldap_ExtendedResponse_parse(const char *buf, long rem) 
        goto end;

    }



    rem = len;  /* ensure that we don't overstep the SEQUENCE */



    /* pull MessageID */

    inf = ASN1_get_object(&cur, &len, &tag, &xclass, rem);

    if (inf != V_ASN1_UNIVERSAL || tag != V_ASN1_INTEGER ||