CVSROOT: /cvs
Module name: src
Changes by: t...@cvs.openbsd.org 2024/12/24 03:03:59
Modified files:
usr.sbin/rpki-client: mft.c
Log message:
Check that the manifest fileList has at least one entry
We already check that the fileList isn't excessively large. A bit later we
also check that the list contains a CRL, as required by RFC 9286. However,
between these two checks a zero-sized allocation may happen, which is now
avoided. sk_num() is one of those gifts that keep on giving, but it seems
that this is the only occurrence in rpki-client that can be problematic.
ok job
