wolftpm:fuzz_asn_cert: Null-dereference READ in ubsan_GetStackTrace

Project: https://github.com/wolfSSL/wolfTPM.git Detailed Report: https://oss-fuzz.com/testcase?key=6447765076115456 Project: wolftpm Fuzzing Engine: libFuzzer Fuzz Target: fuzzasncert Job Type: libfuzzerubsanwolftpm Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x00000000000...

UBUNTU-CVE-2019-18840

In wolfSSL 4.1.0 through 4.2.0c, there are missing sanity checks of memory accesses in parsing ASN.1 certificate data while handshaking. Specifically, there is a one-byte heap-based buffer overflow inside the DecodedCert structure in GetName in wolfcrypt/src/asn.c because the domain name location...