GNU Libtasn1 is a standalone library written in C for manipulating ASN.1 objects including DER/BER encoding/decoding. GNU Libtasn1 is used by GnuTLS to handle X.509 structures and by GNU Shishi to handle Kerberos V5 structures.
This release among other improvements prevents of a possible DoS (infinite loop) in the decoding of BER structures. * Noteworthy changes in release 4.8 (released 2016-04-11) [stable] - Fixes to avoid reliance on C undefined behavior. - Fixes to avoid an infinite recursion when decoding without the ASN1_DECODE_FLAG_STRICT_DER flag. Reported by Pascal Cuoq. - Combined all the BER octet string decoding functions to a single one based on asn1_decode_simple_ber(). Homepage: https://www.gnu.org/software/libtasn1/ Here are the compressed sources: ftp://ftp.gnu.org/gnu/libtasn1/libtasn1-4.8.tar.gz http://ftp.gnu.org/gnu/libtasn1/libtasn1-4.8.tar.gz Here are GPG detached signatures: ftp://ftp.gnu.org/gnu/libtasn1/libtasn1-4.8.tar.gz.sig http://ftp.gnu.org/gnu/libtasn1/libtasn1-4.8.tar.gz.sig If you need help to use Libtasn1, or want to help others, you are invited to join the help-libtasn1 mailing list, see: https://lists.gnu.org/mailman/listinfo/help-libtasn1 All manuals are available from: https://www.gnu.org/software/libtasn1/manual/ Direct links to the manual: HTML: https://www.gnu.org/software/libtasn1/manual/libtasn1.html PDF: https://www.gnu.org/software/libtasn1/manual/libtasn1.pdf Direct links to the API Reference manual: HTML: https://www.gnu.org/software/libtasn1/reference/ PDF: https://www.gnu.org/software/libtasn1/reference/libtasn1.pdf The software is cryptographically signed by the author using an OpenPGP key identified by the following information: pub 3104R/96865171 2008-05-04 [expires: 2028-04-29] uid Nikos Mavrogiannopoulos <nmav <at> gnutls.org> uid Nikos Mavrogiannopoulos <n.mavrogiannopoulos <at> gmail.com> sub 2048R/9013B842 2008-05-04 [expires: 2018-05-02] sub 2048R/1404A91D 2008-05-04 [expires: 2018-05-02] regards, Nikos
