asn1_der_decoding API misuse

Nikos Mavrogiannopoulos nmav at gnutls.org
Fri Jun 17 21:44:23 CEST 2011


On 06/16/2011 04:05 PM, Florian Weimer wrote:
> The comment in gnutls26-2.8.6/lib/minitasn1/decoding.c says this:
> 
>   * @errorDescription: null-terminated string contains details when an
>   *   error occurred.
> 
> However, there are quite a few error returns without previous writes to
> the errorDescription buffer.  Either the callers should be change to
> initialize the character buffer which is passed to asn1_der_decoding(),
> or asn1_der_decoding() should write an empty string to errorDescription
> if no description string is available.

Indeed. It should be fixed. I've added it to my todo list.

regards,
Nikos






More information about the Gnutls-devel mailing list