diff options
author | Dr. Stephen Henson <steve@openssl.org> | 2001-02-24 01:46:46 +0000 |
---|---|---|
committer | Dr. Stephen Henson <steve@openssl.org> | 2001-02-24 01:46:46 +0000 |
commit | 75090e0365d6d441d5ea8495c2afc6c83d5eb886 (patch) | |
tree | cea3ee5b87407c7224717916ddc933ed967cec8f /CHANGES | |
parent | 6676457bba8c0581867f14beddb3df2d4a3baef7 (diff) | |
download | openssl-75090e0365d6d441d5ea8495c2afc6c83d5eb886.tar.gz |
Stop PKCS7_verify() core dumping with unknown public
key algorithms and leaking if the signature verify
fails.
Diffstat (limited to 'CHANGES')
-rw-r--r-- | CHANGES | 5 |
1 files changed, 5 insertions, 0 deletions
@@ -4,6 +4,11 @@ Changes between 0.9.6 and 0.9.6a [xx XXX 2001] + *) Avoid coredump with unsupported or invalid public keys by checking if + X509_get_pubkey() fails in PKCS7_verify(). Fix memory leak when + PKCS7_verify() fails with non detached data. + [Steve Henson] + *) Don't use getenv in library functions when run as setuid/setgid. New function OPENSSL_issetugid(). [Ulf Moeller] |