)]}'
{
  "commit": "bf681a40d6142edfa44a27dc0d6e07e0c37865a4",
  "tree": "e52cf1cc0b6d42b1961e9050119bc9a6cb73fcfb",
  "parents": [
    "993fde51629278f6794e79abaad53fd6fb98e562"
  ],
  "author": {
    "name": "David Benjamin",
    "email": "davidben@chromium.org",
    "time": "Mon Aug 04 18:26:07 2014 -0400"
  },
  "committer": {
    "name": "Adam Langley",
    "email": "agl@google.com",
    "time": "Wed Aug 06 00:11:47 2014 +0000"
  },
  "message": "Fix out-of-bounds read in BN_mod_exp_mont_consttime.\n\nbn_get_bits5 always reads two bytes, even when it doesn\u0027t need to. For some\nsizes of |p|, this can result in reading just past the edge of the array.\nUnroll the first iteration of the loop and avoid reading out of bounds.\n\nReplace bn_get_bits5 altogether in C as it\u0027s not doing anything interesting.\n\nChange-Id: Ibcc8cea7d9c644a2639445396455da47fe869a5c\nReviewed-on: https://boringssl-review.googlesource.com/1393\nReviewed-by: Adam Langley \u003cagl@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "5037caba43a6ff6fedf3d9de1cf4e6fa510911fa",
      "old_mode": 33188,
      "old_path": "crypto/bn/asm/x86_64-mont5.pl",
      "new_id": "80e912688a8e8aba9c38b70701f89cfe63c0d85d",
      "new_mode": 33188,
      "new_path": "crypto/bn/asm/x86_64-mont5.pl"
    },
    {
      "type": "modify",
      "old_id": "69c2f9039bf09d56f98a91dce89de90cb02cfe39",
      "old_mode": 33188,
      "old_path": "crypto/bn/exponentiation.c",
      "new_id": "ca09c6441c6fe9a50963f1edec44644313357950",
      "new_mode": 33188,
      "new_path": "crypto/bn/exponentiation.c"
    }
  ]
}