tree 2ef39448e8ecdeee1ec2f2fa813f54da955de3c0
parent 288ca7dcb44a177a1f3f7fa5be4f581edf1da668
author David Benjamin <davidben@google.com> 1505514810 -0400
committer CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org> 1505516242 +0000

Bound everything parsed by the legacy ASN.1 stack.

crypto/asn1 routinely switches between int and long without overflow
checks. Fortunately, it funnels everything into a common entrypoint, so
we can uniformly bound all inputs to something which comfortably fits in
an int.

Change-Id: I340674c6b07820309dc5891024498878c82e225b
Reviewed-on: https://boringssl-review.googlesource.com/20366
Reviewed-by: Adam Langley <agl@google.com>
Commit-Queue: David Benjamin <davidben@google.com>
CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>