)]}'
{
  "commit": "cb852981cd61733a7a1ae4fd8755b7ff950e857d",
  "tree": "d137cbeca973c98d6a62d9b9b8dd5100c56512c3",
  "parents": [
    "c4f25ce0c6e3822eb639b2a5649a51ea42b46490"
  ],
  "author": {
    "name": "David Benjamin",
    "email": "davidben@chromium.org",
    "time": "Thu Dec 03 10:54:21 2015 -0500"
  },
  "committer": {
    "name": "Adam Langley",
    "email": "agl@google.com",
    "time": "Thu Dec 03 16:43:34 2015 +0000"
  },
  "message": "Fix leak with ASN.1 combine.\n\nWhen parsing a combined structure pass a flag to the decode routine\nso on error a pointer to the parent structure is not zeroed as\nthis will leak any additional components in the parent.\n\nThis can leak memory in any application parsing PKCS#7 or CMS structures.\n\nCVE-2015-3195.\n\nThanks to Adam Langley (Google/BoringSSL) for discovering this bug using\nlibFuzzer.\n\nPR#4131\n\n(Imported from upstream\u0027s cc598f321fbac9c04da5766243ed55d55948637d, with test\nfrom our original report. Verified ASan trips up on the test without the fix.)\n\nChange-Id: I007d93f172b2f16bf6845d685d72717ed840276c\nReviewed-on: https://boringssl-review.googlesource.com/6615\nReviewed-by: Adam Langley \u003cagl@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "d852ad7b660d734f9881ca621f9acd4d4d7da446",
      "old_mode": 33188,
      "old_path": "crypto/asn1/tasn_dec.c",
      "new_id": "7c81753f674c11ef585faa6f13bfbf23507f669e",
      "new_mode": 33188,
      "new_path": "crypto/asn1/tasn_dec.c"
    },
    {
      "type": "modify",
      "old_id": "86476fc76fbfc30f1cdd6a2d2827b1db79fbae3e",
      "old_mode": 33188,
      "old_path": "crypto/evp/evp_extra_test.cc",
      "new_id": "07cb782abbc37b6bee4f737bdd218758c2fc09bd",
      "new_mode": 33188,
      "new_path": "crypto/evp/evp_extra_test.cc"
    }
  ]
}