On 13/05/14 18:38, Viktor Dukhovni wrote:
> - The implementation adds an optional (void *) pointer and a type
> to represent a certificate, but when this is used to compute
> digests, there is no check that the type is as expected, the
> value is unconditionally treated as a certificate if not NULL.
I was all ready to point out the codeline where the check is, and...
it's buggy.
--
Thanks,
Jeremy