)]}'
{
  "commit": "aa4ecb49269666c75919bc068028097c3b9cd42f",
  "tree": "1480437f5618eae7c3f5acb32fcefbf78bbc02d3",
  "parents": [
    "455b78d5f958081f80f212e201e8a1037af308a3"
  ],
  "author": {
    "name": "David Benjamin",
    "email": "davidben@google.com",
    "time": "Thu Oct 29 18:28:45 2020 -0400"
  },
  "committer": {
    "name": "Adam Langley",
    "email": "agl@google.com",
    "time": "Tue Dec 08 18:12:17 2020 +0000"
  },
  "message": "Fix EDIPartyName parsing and GENERAL_NAME_cmp.\n\nSee also CVE-2020-1971, f960d81215ebf3f65e03d4d5d857fb9b666d6920, and\naa0ad2011d3e7ad8a611da274ef7d9c7706e289b from upstream OpenSSL.\n\nUnlike upstream\u0027s version, this CL opts for a simpler edipartyname_cmp.\nGENERAL_NAME_cmp is already unsuitable for ordering, just equality,\nwhich means there\u0027s no need to preserve return values from\nASN1_STRING_cmp. Additionally, the ASN.1 structure implies most fields\ncannot be NULL.\n\n(The change from other to x400Address is a no-op. They\u0027re the same type.\nJust x400Address is a little clearer. Historical quirks of the\nGENERAL_NAME structure.)\n\nChange-Id: I4b0ffe8e931c8ef916794a486e6a0d6d684c0cc1\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/44404\nReviewed-by: Adam Langley \u003cagl@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "56d800cbc2ce99bd902699db91a291e0071c33a7",
      "old_mode": 33188,
      "old_path": "crypto/x509/x509_test.cc",
      "new_id": "4020665d67609815add131f906eaf5c3e4f543b8",
      "new_mode": 33188,
      "new_path": "crypto/x509/x509_test.cc"
    },
    {
      "type": "modify",
      "old_id": "57223b4a4e8180fb39c40e17b124fd9395199939",
      "old_mode": 33188,
      "old_path": "crypto/x509v3/v3_genn.c",
      "new_id": "af7e4e12f0a67a7f7d9176149f28db305600fb9d",
      "new_mode": 33188,
      "new_path": "crypto/x509v3/v3_genn.c"
    },
    {
      "type": "modify",
      "old_id": "a0b6bd839c541507abe9081a17c7b2314f40dab5",
      "old_mode": 33188,
      "old_path": "include/openssl/x509v3.h",
      "new_id": "09fc4ea8b9872f3c7d15d87bc388c78174561427",
      "new_mode": 33188,
      "new_path": "include/openssl/x509v3.h"
    }
  ]
}