tree 303ae997ff45188d2de2066a0e290ea9fb7798d6
parent b324159be9519e0d054011c8bc21cdb5984bceda
author David Benjamin <davidben@chromium.org> 1447349130 -0800
committer Adam Langley <agl@google.com> 1447718354 +0000

size_t SSL*_use_*_ASN1.

So long as we're not getting rid of them (the certificate variants may
be useful when we decouple from crypto/x509 anyway), get the types and
bounds checks right.

Also reject trailing data and require the input be a single element.
Note: this is a slight compatibility risk, but we did it for
SSL*_use_RSAPrivateKey_ASN1 previously and I think it's probably worth
seeing if anything breaks here.

Change-Id: I64fa3fc6249021ccf59584d68e56ff424a190082
Reviewed-on: https://boringssl-review.googlesource.com/6490
Reviewed-by: Adam Langley <agl@google.com>