Lev Walkin wrote:
You might consider trying the open source ASN.1 compiler:
http://lionet.info/asn1c
Cool! I will try to take a look at it.
Does the compiler generate a custom encoder and decoder
for each ASN.1 type it compiles? Your documentation mentions
a generic BER parser and decoder.
Recently ASN.1 decoders have been a source of buffer overflow
vulnerabilities because many of them were not originally
written to handle (maliciously constructed) invalid encoded
data. Could you say something about your decoders in this
respect?
Thanks,
Wan-Teh
_______________________________________________
mozilla-crypto mailing list
[email protected]
http://mail.mozilla.org/listinfo/mozilla-crypto
