Hello!

On Thu, Feb 27, 2014 at 08:20:18PM -0800, Seth Arnold wrote:

> Hello, I'm curious if nginx has made the same mistake as CVE-2009-2408 in
> the ngx_ssl_get_subject_dn() and ngx_ssl_get_issuer_dn() functions:
>
> Note in the following copy-and-pastes the { /* void */ } for loops. That
> should find the end of an ASCII string but if a certificate has 0x00 bytes
> encoded in the fields, nginx may copy only a small portion of the string.
>
> Am I overlooking something?

Special chars are escaped by X509_NAME_oneline().

--
Maxim Dounin
http://nginx.org/

_______________________________________________
nginx-devel mailing list
nginx-devel@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx-devel