From 1e963007c0d9466726a8680e52a95955288d8927 Mon Sep 17 00:00:00 2001
From: Steve Langasek <steve.langasek@canonical.com>
Date: Tue, 7 Oct 2014 05:35:11 +0000
Subject: debian/patches/0001-Update-openssl-to-0.9.8za.patch: cherry-pick
 openssl 0.9.8za in via upstream.

---
 Cryptlib/OpenSSL/crypto/evp/encode.c | 1 +
 1 file changed, 1 insertion(+)

(limited to 'Cryptlib/OpenSSL/crypto/evp/encode.c')

diff --git a/Cryptlib/OpenSSL/crypto/evp/encode.c b/Cryptlib/OpenSSL/crypto/evp/encode.c
index e8a52181..69f7ccad 100755
--- a/Cryptlib/OpenSSL/crypto/evp/encode.c
+++ b/Cryptlib/OpenSSL/crypto/evp/encode.c
@@ -324,6 +324,7 @@ int EVP_DecodeUpdate(EVP_ENCODE_CTX *ctx, unsigned char *out, int *outl,
 				v=EVP_DecodeBlock(out,d,n);
 				n=0;
 				if (v < 0) { rv=0; goto end; }
+				if (eof > v) { rv=-1; goto end; }
 				ret+=(v-eof);
 				}
 			else
-- 
cgit v1.2.3