summaryrefslogtreecommitdiff
path: root/security/nss/lib/crmf/respcmn.c
diff options
context:
space:
mode:
authorian.mcgreer%sun.com <devnull@localhost>2002-05-02 19:00:13 +0000
committerian.mcgreer%sun.com <devnull@localhost>2002-05-02 19:00:13 +0000
commita1639141f0ed4160359cf74705d49a6b9d3296df (patch)
tree325c0b93152b2d281c4508a94067552da3b151b8 /security/nss/lib/crmf/respcmn.c
parente11f737be2ce33ce105d095a80945bf327f0e86f (diff)
downloadnss-hg-a1639141f0ed4160359cf74705d49a6b9d3296df.tar.gz
bug 141355, CERT_DecodeDERCertificate is not a safe function for some uses, must be replaced with CERT_NewTempCertificate.
Diffstat (limited to 'security/nss/lib/crmf/respcmn.c')
-rw-r--r--security/nss/lib/crmf/respcmn.c3
1 files changed, 2 insertions, 1 deletions
diff --git a/security/nss/lib/crmf/respcmn.c b/security/nss/lib/crmf/respcmn.c
index d7c703ec0..871ece3ec 100644
--- a/security/nss/lib/crmf/respcmn.c
+++ b/security/nss/lib/crmf/respcmn.c
@@ -168,7 +168,8 @@ cmmf_MakeCertList(CERTCertificate **inCerts)
if (derCert->data == NULL) {
derCert = freeCert = cmmf_encode_certificate(inCerts[i]);
}
- currCert=CERT_DecodeDERCertificate(derCert, PR_TRUE, NULL);
+ currCert=CERT_NewTempCertificate(CERT_GetDefaultCertDB(),
+ derCert, NULL, PR_FALSE, PR_TRUE);
if (freeCert != NULL) {
SECITEM_FreeItem(freeCert, PR_TRUE);
freeCert = NULL;