[gnutls-devel] fixes on 3.3.x gnutls branch, why not this one?

Andreas Metzler ametzler at bebt.de
Sun Mar 5 16:20:24 CET 2017


is there a reason why this patch was cherrypicked for the 3.5.x
branch but not for 3.3.x?
pencdk: read_attribute: account buffer size

That ensures that there is no read past the end of buffer.

Resolves the oss-fuzz found bug:

Relates: #159

tia, cu Andreas
`What a good friend you are to him, Dr. Maturin. His other friends are
so grateful to you.'
`I sew his ears on from time to time, sure'

More information about the Gnutls-devel mailing list