)]}'
{
  "commit": "3c995f30e7312e6d95782cc787e566fb12f8aefb",
  "tree": "c071d387eb2d64105680aff777075cd177e7f587",
  "parents": [
    "d0beda01f9d0abfaf35ab24089ed219e756add01"
  ],
  "author": {
    "name": "Martin Kreichgauer",
    "email": "martinkr@google.com",
    "time": "Mon Aug 14 17:15:14 2017 -0700"
  },
  "committer": {
    "name": "CQ bot account: commit-bot@chromium.org",
    "email": "commit-bot@chromium.org",
    "time": "Wed Sep 06 21:58:26 2017 +0000"
  },
  "message": "Fix overflow in c2i_ASN1_BIT_STRING.\n\nc2i_ASN1_BIT_STRING takes length as a long but uses it as an int. Check bounds\nbefore doing so. Previously, excessively large inputs to the function could\nwrite a single byte outside the target buffer. (This is unreachable as\nasn1_ex_c2i already uses int for the length.)\n\nThanks to NCC for finding this issue.\n\nChange-Id: I7ae42214ca620d4159fa01c942153717a7647c65\nReviewed-on: https://boringssl-review.googlesource.com/19204\nReviewed-by: Martin Kreichgauer \u003cmartinkr@google.com\u003e\nCommit-Queue: Martin Kreichgauer \u003cmartinkr@google.com\u003e\nCQ-Verified: CQ bot account: commit-bot@chromium.org \u003ccommit-bot@chromium.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "ea9da24754e065fe805b9076823ccdb0e8ae97c3",
      "old_mode": 33188,
      "old_path": "crypto/asn1/a_bitstr.c",
      "new_id": "106dab1b53392e40b2c882700cbe2d7c5644aca0",
      "new_mode": 33188,
      "new_path": "crypto/asn1/a_bitstr.c"
    }
  ]
}
