Skip to content

[Bug]: WolfSSL accepts the Issuer field with invalid UTF-8 values. #9747

@onepeople158

Description

@onepeople158

Contact Details

No response

Version

I am using version 0.1.7 of the wolfssl Command Line Utility. Linked to wolfSSL version 5.7.6

Description

Hello developers,
I have successfully parsed a CRL file whose Issuer field contains an invalid UTF-8 value using WolfSSL. The 5th byte of the L (LocalityName) attribute in the Issuer field is 0xFF, which is an illegal byte in UTF-8 encoding.

Reproduction steps

wolfssl crl -inform der -in crl_fuzz_L_field_0xFF.der -text

crl_fuzz_L_field_0xFF.zip

Relevant log output

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions