libtasn1/SOURCES/libtasn1-4.13-cve-2025-13151-stack-buffer-overflow.patch
2026-07-08 10:42:15 -04:00

27 lines
853 B
Diff

From 453771a06d7ceea1d959b04ba73383c9cbde9f2a Mon Sep 17 00:00:00 2001
From: Vijay Sarvepalli <vssarvepalli@cert.org>
Date: Mon, 22 Dec 2025 12:24:27 -0500
Subject: [PATCH] Fix for CVE-2025-13151 Buffer overflow
Signed-off-by: Simon Josefsson <simon@josefsson.org>
---
lib/decoding.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/lib/decoding.c b/lib/decoding.c
index 05dc236..f73e696 100644
--- a/lib/decoding.c
+++ b/lib/decoding.c
@@ -1926,7 +1926,7 @@ int
asn1_expand_octet_string (asn1_node definitions, asn1_node * element,
const char *octetName, const char *objectName)
{
- char name[2 * ASN1_MAX_NAME_SIZE + 1], value[ASN1_MAX_NAME_SIZE];
+ char name[2 * ASN1_MAX_NAME_SIZE + 2], value[ASN1_MAX_NAME_SIZE];
int retCode = ASN1_SUCCESS, result;
int len, len2, len3;
asn1_node p2, aux = NULL;
--
2.54.0