tree e2cf01841a6ce776e79bdccac2c97019a6e65ded
parent 326ec048bf082bf136ab3d6922fa3a89bc6d5892
author Christian Heimes <christian@cheimes.de> 1376693687 +0200
committer Christian Heimes <christian@cheimes.de> 1376693687 +0200
HG:extra source:c9f073e593b037e8a29e386326859537691bcf62

Issue #18709: Fix CVE-2013-4238. The SSL module now handles NULL bytes
inside subjectAltName correctly. Formerly the module has used OpenSSL's
GENERAL_NAME_print() function to get the string represention of ASN.1
strings for rfc822Name (email), dNSName (DNS) and
uniformResourceIdentifier (URI).