asn1_der_decoding API misuse

Florian Weimer fweimer at
Thu Jun 16 16:05:33 CEST 2011

The comment in gnutls26-2.8.6/lib/minitasn1/decoding.c says this:

  * @errorDescription: null-terminated string contains details when an
  *   error occurred.

However, there are quite a few error returns without previous writes to
the errorDescription buffer.  Either the callers should be change to
initialize the character buffer which is passed to asn1_der_decoding(),
or asn1_der_decoding() should write an empty string to errorDescription
if no description string is available.

Florian Weimer                <fweimer at>
BFK edv-consulting GmbH
Kriegsstraße 100              tel: +49-721-96201-1
D-76133 Karlsruhe             fax: +49-721-96201-99

More information about the Gnutls-devel mailing list