)]}'
{
  "commit": "6195bf8242156c9a2fa75702eee058f91b86a88b",
  "tree": "788ade99f95fb9f827a2970aff79956f8e06ffbb",
  "parents": [
    "b9232f9e27e5668bc0414879dcdedb2a59ea75f2"
  ],
  "author": {
    "name": "David Benjamin",
    "email": "davidben@google.com",
    "time": "Tue Jan 31 13:36:55 2023 -0500"
  },
  "committer": {
    "name": "David Benjamin",
    "email": "davidben@google.com",
    "time": "Fri Feb 10 19:05:04 2023 +0000"
  },
  "message": "Fix the type of x400Address in GENERAL_NAME\n\nThis fixes CVE-2023-0286.\n\nThe main impact is that GENERAL_NAME_cmp, when given x400Addresses, can\ninterpret a pointer with the wrong type. Applications that set\nX509_V_FLAG_CRL_CHECK and take CRLs from untrusted sources should take\nthis patch.\n\nChange-Id: Ib76265fa098df3cb0db075646773c14d59d0ca75\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/56985\nCommit-Queue: Bob Beck \u003cbbe@google.com\u003e\nAuto-Submit: David Benjamin \u003cdavidben@google.com\u003e\nReviewed-by: Bob Beck \u003cbbe@google.com\u003e\n(cherry picked from commit f219ae96bef5be04e78ddb5b5226ccb6439bd3ed)\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/57165\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "77c383a6666d531e568f4757a28469457c047deb",
      "old_mode": 33188,
      "old_path": "src/crypto/x509/x509_test.cc",
      "new_id": "9808073aa987ed6147003daf6c4fdcc7ccc28724",
      "new_mode": 33188,
      "new_path": "src/crypto/x509/x509_test.cc"
    },
    {
      "type": "modify",
      "old_id": "ae79374a8c422065d83bde21d96510f0c80a3c4c",
      "old_mode": 33188,
      "old_path": "src/crypto/x509v3/v3_genn.c",
      "new_id": "16704be24b91884f133a60d4caff1f8bc94c3d82",
      "new_mode": 33188,
      "new_path": "src/crypto/x509v3/v3_genn.c"
    },
    {
      "type": "modify",
      "old_id": "acff637f79f0c7b3e82ba1f609314cbd60109e50",
      "old_mode": 33188,
      "old_path": "src/include/openssl/x509v3.h",
      "new_id": "59558cd9646ab01d2042e08f6c54ee95e3fa95d6",
      "new_mode": 33188,
      "new_path": "src/include/openssl/x509v3.h"
    }
  ]
}