BB: polarssl: update to v1.3.9 and patch CVE-2015-1182
[openwrt-14.07/.git] / package / libs / polarssl / patches / 300-CVE-2015-1182.patch
1 --- a/library/asn1parse.c
2 +++ b/library/asn1parse.c
3 @@ -278,6 +278,8 @@ int asn1_get_sequence_of( unsigned char
4              if( cur->next == NULL )
5                  return( POLARSSL_ERR_ASN1_MALLOC_FAILED );
6  
7 +            memset( cur->next, 0, sizeof( asn1_sequence ) );
8 +
9              cur = cur->next;
10          }
11      }