libimcv: Prevent integer overflow in time conversion
authorAndreas Steffen <andreas.steffen@strongswan.org>
Mon, 18 Jun 2018 09:04:53 +0000 (11:04 +0200)
committerAndreas Steffen <andreas.steffen@strongswan.org>
Mon, 18 Jun 2018 09:04:53 +0000 (11:04 +0200)
src/libimcv/tcg/pts/tcg_pts_attr_simple_comp_evid.c

index 82e18e2..c704e7d 100644 (file)
@@ -261,8 +261,9 @@ static const int tm_leap_1970 = 477;
  */
 bool measurement_time_from_utc(time_t *measurement_time, chunk_t utc_time)
 {
-       int tm_year, tm_mon, tm_day, tm_days, tm_hour, tm_min, tm_sec, tm_secs;
+       int tm_year, tm_mon, tm_day, tm_hour, tm_min, tm_sec;
        int tm_leap_4, tm_leap_100, tm_leap_400, tm_leap;
+       time_t tm_days, tm_secs;
        char buf[BUF_LEN];
 
        if (memeq(utc_undefined_time_str, utc_time.ptr, utc_time.len))