tree de37e0ad00cdc5fa7cebacc01627223d2c862c41
parent d03b45948ec9af4ec01f3a9b5adc381c01966659
author Rudolf Polzer <rpolzer@google.com> 1778143471 -0700
committer boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com <boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com> 1778230925 -0700

Limit PEM data to 1 GiB.

There should be no single PEM block of this size in existence. This limit
however guards against possible integer overflows in other moduels. A
PEM block larger than this will be skipped by libpki (which has no way
to report errors to begin with), and return ERR_R_OVERFLOW from
libcrypto.

Update-Note: if you hit this, try reducing the size of your PEM blocks.

Change-Id: I99962d363b54f40e963793f15f0dcda56a6a6964
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/94967
Reviewed-by: Xiangfei Ding <xfding@google.com>
Presubmit-BoringSSL-Verified: boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com <boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com>
Commit-Queue: Rudolf Polzer <rpolzer@google.com>