sharpetronics/strongswan
1
0
Fork 0
mirror of https://github.com/strongswan/strongswan.git synced 2025-10-04 00:00:14 -04:00
Code Issues Projects Releases Wiki Activity

x509: Make sure the status in OCSP responses has the correct length

Browse Source
This commit is contained in:
Tobias Brunner 2023-11-24 14:49:24 +01:00
parent ebf5afcefa
commit 9c4846cdbe
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/libstrongswan/plugins/x509/x509_ocsp_response.c
View File

@ -827,6 +827,10 @@ static bool parse_OCSPResponse(private_x509_ocsp_response_t *this)
switch (objectID)
{
case OCSP_RESPONSE_STATUS:
if (object.len != 1)
{
goto end;
}
this->ocsp_status = (ocsp_status_t)*object.ptr;
switch (this->ocsp_status)
{