feedc0de/wolfssl
1
0
Fork 0
forked from wolfSSL/wolfssl
Code Pull Requests Activity

Merge pull request #4098 from SparkiDev/san_hw_name_fix

Browse Source 
Certs: fix leak when multiple hardware names in SAN
This commit is contained in:
David Garske
2021-06-11 08:25:28 -07:00
committed by GitHub
parent 89156908da e76ae2b8ac
commit b28aab4cf9
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
wolfcrypt/src/asn.c
View File

@@ -8584,6 +8584,14 @@ static int DecodeAltNames(const byte* input, int sz, DecodedCert* cert)
return ASN_PARSE_E; return ASN_PARSE_E;
} }
/* Certiciates issued with this OID in the subject alt name are for
* verifying signatures created on a module.
* RFC 4108 Section 5. */
if (cert->hwType != NULL) {
WOLFSSL_MSG("\tAlready seen Hardware Module Name");
return ASN_PARSE_E;
}
if (GetASNTag(input, &idx, &tag, sz) < 0) { if (GetASNTag(input, &idx, &tag, sz) < 0) {
return ASN_PARSE_E; return ASN_PARSE_E;
} }