Skip to content

Conversation

@baloo
Copy link
Member

@baloo baloo commented Mar 13, 2025

This is another take on #1714

That brings back the original fix, but does not reject with InvalidLength when the out buffer is empty.

baloo added 2 commits March 13, 2025 09:22
Since base64ct 1.7.0 ([RustCrypto#1387]), it now rejects zero lengths reads. This 
happens to trigger with an sha256WithRSAEncryption AlgorithmIdentifier
where the parameters are null.
@baloo
Copy link
Member Author

baloo commented Mar 13, 2025

This is placed on part of #1711 (only its tests) to prove it doesn't re-introduce the regression.

@tarcieri
Copy link
Member

I guess #1711 can be closed in favor of this?

@tarcieri tarcieri merged commit 26ff0b8 into RustCrypto:master Mar 13, 2025
121 checks passed
@baloo baloo deleted the baloo/base64ct/null-reads branch March 13, 2025 18:38
@baloo baloo mentioned this pull request Mar 13, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants