Closed
Bug 2002247
Opened 5 months ago
Closed 2 months ago
Add a maximum element length to PKCS12 Decoder
Categories
(NSS :: Libraries, enhancement, P1)
NSS
Libraries
Tracking
(nss 3.122)
RESOLVED
FIXED
| Tracking | Status | |
|---|---|---|
| nss | --- | 3.122 |
People
(Reporter: djackson, Assigned: djackson)
References
Details
(Keywords: sec-other)
Attachments
(1 file)
|
48 bytes,
text/x-phabricator-request
|
Details |
No description provided.
|
Assignee | |
Comment 1•5 months ago
|
||
|
|
Assignee | |
Updated•5 months ago
|
Group: crypto-core-security
|
||
Comment 2•5 months ago
|
||
If this is an "enhancement" does it need to be hidden as a security bug?
- would mozilla confidential fit better?
- is it related to some other bug that is a security bug? If so could you link them?
- if this is a security bug is there an appropriate sec-low/moderate/high rating for it? sec-other because it's related to some other known bug? sec-want because it's a hardening feature?
Flags: needinfo?(djackson)
|
||
Updated•5 months ago
|
Attachment #9528998 -
Attachment description: Bug 2002247: Add allocation limit to pkcs12 decoding. r=#nss-reviewers → (secure)
|
|
Assignee | |
Comment 3•2 months ago
|
||
This was part of a stack adding a new fuzzer and didn't want to disclose it until we'd had a chance to run it in private ahead of landing it. It's now fine to disclose.
Group: crypto-core-security
Flags: needinfo?(djackson)
Pushed by djackson@mozilla.com:
https://hg.mozilla.org/projects/nss/rev/75a3b5790acd
Add allocation limit to pkcs12 decoding. r=nss-reviewers,rrelyea
Status: NEW → RESOLVED
Closed: 2 months ago
Resolution: --- → FIXED
|
|
||
Updated•2 months ago
|
Attachment #9528998 -
Attachment description: (secure) → Bug 2002247: Add allocation limit to pkcs12 decoding. r=#nss-reviewers
|
||
Updated•1 month ago
|
status-nss:
--- → 3.122
You need to log in
before you can comment on or make changes to this bug.
Description
•