tree 327f0b98e76ed60e99bbfcf270caa71f911f0c5b
parent eeb3333f44cf0a8b0a1018dcfca54c72d8c4a3a3
author Bob Beck <bbe@google.com> 1667841415 +0000
committer Boringssl LUCI CQ <boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com> 1667861038 +0000

Fix integer overflow in OPENSSL_gmtime_adj

OpenSSL uses integer parameters for this function, and the
multiplication here ends up being done as an integer.  Since we
support values up to year 9999, it is possible for someone to pass
in a number of days to the "adj" function to adjust a base time far
enough to overflow a 32 bit integer.

Change-Id: Iedfc33d8bf90d70049f99897df1d193fb29805d0
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/55125
Reviewed-by: David Benjamin <davidben@google.com>
Commit-Queue: Bob Beck <bbe@google.com>