You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@santuario.apache.org by "Scott Cantor (JIRA)" <ji...@apache.org> on 2018/08/01 13:00:01 UTC

[jira] [Created] (SANTUARIO-491) Default KeyInfo resolver doesn't check for empty element content.

Scott Cantor created SANTUARIO-491:
--------------------------------------

             Summary: Default KeyInfo resolver doesn't check for empty element content.
                 Key: SANTUARIO-491
                 URL: https://issues.apache.org/jira/browse/SANTUARIO-491
             Project: Santuario
          Issue Type: Bug
          Components: C++
    Affects Versions: C++ 2.0.0, C++ 1.7.3, C++ 1.7.2, C++ 1.7.1, C++ 1.7.0, C++ 1.6.1, C++ 1.6.0, C++ 1.5.1
            Reporter: Scott Cantor
            Assignee: Scott Cantor
             Fix For: C++ 2.0.1


The KeyInfo cases for RSA/DSA/EC/DER don't have null guards around the extraction of the fields into safeBuffers, leading to crashes.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)