tree f6920e4a57437a5a373f0db94239858f76fca8c3
parent 13c67c99d8b2e4efef4fb6f6b67e3abfd6031920
author David Benjamin <davidben@google.com> 1635512733 -0400
committer Adam Langley <agl@google.com> 1635790131 +0000

Don't parse constructed BIT STRINGs in crypto/bytestring

Update-Note: PKCS#7 and PKCS#12 parsers will now reject BER constructed
BIT STRINGs. We were previously misparsing them, as was OpenSSL. Given
how long the incorrect parse has been out there, without anyone noticing
(other parsers handle it correctly), it is unlikely these exist.

Change-Id: I61d317461cc59480dc9f772f88edc7758206d20d
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/50289
Reviewed-by: Adam Langley <agl@google.com>