[rt-commit] r231 - /redwax-tool/trunk/redwax_openssl.c

rt-commit at redwax.eu rt-commit at redwax.eu
Wed Jul 22 19:27:59 CEST 2026


Author: minfrin at redwax.eu
Date: Wed Jul 22 19:27:58 2026
New Revision: 231

Log:
Limit bit field lengths to the length of the table
descriptions.

Modified:
    redwax-tool/trunk/redwax_openssl.c

Modified: redwax-tool/trunk/redwax_openssl.c
==============================================================================
--- redwax-tool/trunk/redwax_openssl.c	(original)
+++ redwax-tool/trunk/redwax_openssl.c	Wed Jul 22 19:27:58 2026
@@ -5389,7 +5389,7 @@
         int i, usages = 0;
 
         if (usage) {
-            for (i = 0; i < 32; i++) {
+            for (i = 0; key_usage_type_table[i].sname; i++) {
                 if (ASN1_BIT_STRING_get_bit(usage, i)) {
                     ex_kusage |= (1U << i);
                 }
@@ -5433,7 +5433,7 @@
 
             redwax_metadata_push_array(m, "ExtendedKeyUsages", 0);
 
-            for (i = 0; i < sk_ASN1_OBJECT_num(eku); i++) {
+            for (i = 0; i < sk_ASN1_OBJECT_num(eku) && key_usage_type_table[i].sname; i++) {
 
                 char obj_tmp[80];
                 ASN1_OBJECT *obj;
@@ -5461,7 +5461,7 @@
         int i, nscerts = 0;
 
         if (nscert) {
-            for (i = 0; i < 32; i++) {
+            for (i = 0; ns_cert_type_table[i].sname; i++) {
                 if (ASN1_BIT_STRING_get_bit(nscert, i)) {
                     ex_nscert |= (1U << i);
                 }



More information about the rt-commit mailing list