[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
asn1_der_decoding API misuse
From: |
Florian Weimer |
Subject: |
asn1_der_decoding API misuse |
Date: |
Thu, 16 Jun 2011 14:05:33 +0000 |
The comment in gnutls26-2.8.6/lib/minitasn1/decoding.c says this:
* @errorDescription: null-terminated string contains details when an
* error occurred.
However, there are quite a few error returns without previous writes to
the errorDescription buffer. Either the callers should be change to
initialize the character buffer which is passed to asn1_der_decoding(),
or asn1_der_decoding() should write an empty string to errorDescription
if no description string is available.
--
Florian Weimer <address@hidden>
BFK edv-consulting GmbH http://www.bfk.de/
Kriegsstraße 100 tel: +49-721-96201-1
D-76133 Karlsruhe fax: +49-721-96201-99
- asn1_der_decoding API misuse,
Florian Weimer <=