While having a minimal signature verifier is good, you wouldn't have been hit by...

agl on April 19, 2012 | parent | context | favorite | on: Heap overflow bug in OpenSSL

While having a minimal signature verifier is good, you wouldn't have been hit by this bug in any case. This only affects parsing from a BIO or a FILE, and the OpenSSL RSA code parses the signature from memory.