Kazuki Yamaguchi 0765e35cba [ruby/openssl] asn1: limit nesting depth in OpenSSL::ASN1.decode ...

Feeding a deeply nested constructed encoding to OpenSSL::ASN1.decode,
.decode_all, or .traverse can cause unbounded recursion and result in
SystemStackError.

Add an explicit nesting depth limit of 200 levels and raise
OpenSSL::ASN1::ASN1Error if it is exceeded. This limit is arbitrary and
currently not configurable, but should be sufficient for any practical
use cases.

Fixes https://hackerone.com/reports/3662125

https://github.com/ruby/openssl/commit/fc753239cc

2026-05-30 09:03:21 +00:00

..

fixtures/pkey

…

test_asn1.rb

[ruby/openssl] asn1: limit nesting depth in OpenSSL::ASN1.decode

2026-05-30 09:03:21 +00:00

test_bn.rb

…

test_buffering.rb

…

test_cipher.rb

…

test_config.rb

…

test_digest.rb

[ruby/openssl] Make OpenSSL::Digest classes Ractor-safe

2026-05-29 08:23:23 +00:00

test_engine.rb

…

test_fips.rb

…

test_hmac.rb

[ruby/openssl] hmac: enable tests in the FIPS mode

2026-04-29 11:07:20 +00:00

test_kdf.rb

[ruby/openssl] Fix test_kdf.rb in FIPS.

2026-05-29 08:24:54 +00:00

test_ns_spki.rb

…

test_ocsp.rb

…

test_ossl.rb

[ruby/openssl] Fix potential UAF in ossl_crypto_fixed_length_secure_compare

2026-03-27 07:09:03 +00:00

test_pair.rb

…

test_pkcs7.rb

…

test_pkcs12.rb

…

test_pkey_dh.rb

…

test_pkey_dsa.rb

…

test_pkey_ec.rb

…

test_pkey_rsa.rb

[ruby/openssl] test_pkey_rsa.rb: Fix test_private_encoding_encrypted in OpenSSL 4.0 FIPS

2026-03-31 15:14:53 +00:00

test_pkey.rb

[ruby/openssl] hmac: enable tests in the FIPS mode

2026-04-29 11:07:20 +00:00

test_provider.rb

…

test_random.rb

…

test_ssl_session.rb

…

test_ssl.rb

[ruby/openssl] ssl: fix test_tmp_dh and test_tmp_dh_callback with OpenSSL 4.0

2026-03-31 15:14:53 +00:00

test_ts.rb

[ruby/openssl] Fix test_ts.rb in FIPS.

2026-05-30 08:47:04 +00:00

test_x509attr.rb

…

test_x509cert.rb

…

test_x509crl.rb

…

test_x509ext.rb

…

test_x509name.rb

…

test_x509req.rb

…

test_x509store.rb

…

ut_eof.rb

…

utils.rb

…