tree 958822e2a4a0097f90f3f0efccfd1dabea27c38a
parent d258de72480b7538eaa5d1fa8faedaf2d4c8b5d1
author David Benjamin <davidben@google.com> 1645114274 -0500
committer Boringssl LUCI CQ <boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com> 1646755074 +0000

Fix theoretical overflow in ASN1_INTEGER_cmp.

While unlikely, ASN1_STRING_cmp is allowed to return INT_MIN (by way of
memcmp), in which case negating would overflow.

Change-Id: Iec63a6acfad2c662493d22a0acea39ca630881c8
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/51630
Reviewed-by: Adam Langley <agl@google.com>
Commit-Queue: David Benjamin <davidben@google.com>