)]}'
{
  "commit": "50de086abd0f23b58320d6aa310bacdd48e80e53",
  "tree": "7b9db8460625f796fd55348bf38d609dfec6a482",
  "parents": [
    "31f1466a613774369053a94eabbae38fb9cbb7f9"
  ],
  "author": {
    "name": "David Benjamin",
    "email": "davidben@google.com",
    "time": "Thu Feb 02 11:25:15 2023 -0500"
  },
  "committer": {
    "name": "Boringssl LUCI CQ",
    "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com",
    "time": "Thu Feb 02 16:44:57 2023 +0000"
  },
  "message": "Cap bit indices in the unsafe string-based X.509 extensions API\n\nWithout a limit, a short input can translate into a very large allocation,\nwhich is upsetting the fuzzers. Set a limit of 256, which allows up to a\n32-byte allocation. (The highest bit index of any type in RFC 5280 is\n8, so this is plenty of buffer.)\n\nWe do not consider this function to be safe with untrusted inputs (even\nwithout bugs, it is prone to string injection vulnerabilities), so DoS\nis not truly a concern, but the limit is necessary to keep fuzzing\neffective.\n\nUpdate-Note: If anyone is using FORMAT:BITLIST to create very large BIT\nSTRINGs, this will break. This is unlikely and should be caught by\nunit tests; if a project hits this outside of tests, that means they are\npassing untrusted input into this function, which is a security\nvulnerability in itself, and means they especially need this change to\navoid a DoS.\n\nBug: oss-fuzz:55603\nChange-Id: Ie9ec0d35c7d67a568371dfa961867bf1404f7e2f\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/56785\nReviewed-by: Bob Beck \u003cbbe@google.com\u003e\nCommit-Queue: Bob Beck \u003cbbe@google.com\u003e\nAuto-Submit: David Benjamin \u003cdavidben@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "6dcf1292ec845465adc86eb3abe0a01fbdb09115",
      "old_mode": 33188,
      "old_path": "crypto/x509/asn1_gen.c",
      "new_id": "37048087f11d9c9de18af1dca99a5e12833e3a32",
      "new_mode": 33188,
      "new_path": "crypto/x509/asn1_gen.c"
    },
    {
      "type": "modify",
      "old_id": "9abe953364cc9aed0af236d7bed61cb9bee09fd1",
      "old_mode": 33188,
      "old_path": "crypto/x509/x509_test.cc",
      "new_id": "cd231c85fb587eca9a6adc7f3ab6edf8fe4616a0",
      "new_mode": 33188,
      "new_path": "crypto/x509/x509_test.cc"
    }
  ]
}