[openssl/openssl] eeee3c: Ensure ASN1 types are checked before use.

[Bob Beck]

Branch: refs/heads/openssl-3.3
Home: https://github.com/openssl/openssl
Commit: eeee3cbd4d682095ed431052f00403004596373e
https://github.com/openssl/openssl/commit/eeee3cbd4d682095ed431052f00403004596373e
Author: Bob Beck <be...@openssl.org>
Date: 2026-01-13 (Tue, 13 Jan 2026)

Changed paths:
M apps/s_client.c
M crypto/pkcs12/p12_kiss.c
M crypto/pkcs7/pk7_doit.c

Log Message:
-----------
Ensure ASN1 types are checked before use.

Some of these were fixed by LibreSSL in commit https://github.com/openbsd/src/commit/aa1f637d454961d22117b4353f98253e984b3ba8
this fix includes the other fixes in that commit, as well as fixes for others found by a scan
for a similar unvalidated access paradigm in the tree.

Reviewed-by: Kurt Roeckx <ku...@roeckx.be>
Reviewed-by: Shane Lontis <shane....@oracle.com>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29582)



To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications