diff options
| author | simon <simon@FreeBSD.org> | 2009-01-07 20:17:55 +0000 |
|---|---|---|
| committer | simon <simon@FreeBSD.org> | 2009-01-07 20:17:55 +0000 |
| commit | abe6016909259942e4406e3f1ad00457ed92ad7b (patch) | |
| tree | 35047b128f79f0cc0e19f739b1989b690c953007 /crypto/openssl/ssl/s2_srvr.c | |
| parent | ef24bb1a20fff74f45c2d0daf8a10d11d47251a4 (diff) | |
| download | FreeBSD-src-abe6016909259942e4406e3f1ad00457ed92ad7b.zip FreeBSD-src-abe6016909259942e4406e3f1ad00457ed92ad7b.tar.gz | |
Prevent cross-site forgery attacks on lukemftpd(8) due to splitting
long commands into multiple requests. [09:01]
Fix incorrect OpenSSL checks for malformed signatures due to invalid
check of return value from EVP_VerifyFinal(), DSA_verify, and
DSA_do_verify. [09:02]
Security: FreeBSD-SA-09:01.lukemftpd
Security: FreeBSD-SA-09:02.openssl
Obtained from: NetBSD [SA-09:01]
Obtained from: OpenSSL Project [SA-09:02]
Approved by: so (simon)
Diffstat (limited to 'crypto/openssl/ssl/s2_srvr.c')
| -rw-r--r-- | crypto/openssl/ssl/s2_srvr.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/crypto/openssl/ssl/s2_srvr.c b/crypto/openssl/ssl/s2_srvr.c index 27d71a2..e2cba0b 100644 --- a/crypto/openssl/ssl/s2_srvr.c +++ b/crypto/openssl/ssl/s2_srvr.c @@ -1054,7 +1054,7 @@ static int request_certificate(SSL *s) i=ssl_verify_cert_chain(s,sk); - if (i) /* we like the packet, now check the chksum */ + if (i > 0) /* we like the packet, now check the chksum */ { EVP_MD_CTX ctx; EVP_PKEY *pkey=NULL; @@ -1083,7 +1083,7 @@ static int request_certificate(SSL *s) EVP_PKEY_free(pkey); EVP_MD_CTX_cleanup(&ctx); - if (i) + if (i > 0) { if (s->session->peer != NULL) X509_free(s->session->peer); |
