CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/08/30 10:52:07
Modified files:
regress/lib/libcrypto/pkcs7: pkcs7test.c
Log message:
"Stream" valid PKCS7 objects with omitted content
The PKCS#7 standard marks the content element of the ContentInfo OPTIONAL.
Accordingly, a PKCS#7 object only containing a Content Type OID is valid:
SEQUENCE {
OBJECT_IDENTIFIER { 1.2.840.113549.1.7.4 }
}
Deserializing such an object works and therefore streaming should at least
have the decency of not segfaulting. Of course there's nothing decent about
PKCS#7 be it the standard or its OpenSSL "implementation".
Exercises a problem reported by Acts1361 and currently crashes.
To be fixed in pk7_lib.c r1.32.
