In routine ASN1_GENERALIZEDTIME_print the line
/* Check for fractions of seconds. */
if (i >= 15 && v[14] == '.')
uses the variable i which no longer has the
value of tm->length but 12. Shouldn't the code
be:
/* Check for fractions of seconds. */
if (i >= tm->length && v[14] == '.')
All recent versions of openssl affected.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [email protected]
Automated List Manager [email protected]
