[rs-commit] r498 - in /mod_csr/trunk: ChangeLog mod_csr.c

[rs-commit at redwax.eu]

Author: minfrin at redwax.eu
Date: Fri Apr 25 20:28:22 2025
New Revision: 498

Log:
Use signed lengths returned by i2d_X509_REQ.

Modified:
    mod_csr/trunk/ChangeLog
    mod_csr/trunk/mod_csr.c

Modified: mod_csr/trunk/ChangeLog
==============================================================================
--- mod_csr/trunk/ChangeLog	(original)
+++ mod_csr/trunk/ChangeLog	Fri Apr 25 20:28:22 2025
@@ -1,5 +1,7 @@
 
 Changes with v0.2.5
+
+ *) Use signed lengths returned by i2d_X509_REQ. [Graham Leggett]
 
  *) Declare bit fields as unsigned. [Graham Leggett]
 

Modified: mod_csr/trunk/mod_csr.c
==============================================================================
--- mod_csr/trunk/mod_csr.c	(original)
+++ mod_csr/trunk/mod_csr.c	Fri Apr 25 20:28:22 2025
@@ -770,6 +770,7 @@
     BIO *out = NULL;
     BUF_MEM *bptr = NULL;
 
+    apr_ssize_t slen;
     apr_size_t len;
     int idx;
 
@@ -940,20 +941,21 @@
     }
 
     /* write out the certificate */
-    len = i2d_X509_REQ(creq, NULL);
-    if (len <= 0) {
+    slen = i2d_X509_REQ(creq, NULL);
+    if (slen <= 0) {
         log_message(r, APR_SUCCESS,
                 "could not DER encode the certificate request");
 
         return HTTP_INTERNAL_SERVER_ERROR;
     }
-    der = p = apr_palloc(r->pool, len);
+    der = p = apr_palloc(r->pool, slen);
     if (!i2d_X509_REQ(creq, &p)) {
         log_message(r, APR_SUCCESS,
                 "could not DER encode the certificate request");
 
         return HTTP_INTERNAL_SERVER_ERROR;
     }
+    len = slen;
 
     /* do the authz */
     rv = ap_run_ca_reqauthz(r, params, der, len);