Dr. Stephen Henson c394a48894 Add PSS parameter check. ...

Avoid seg fault by checking mgf1 parameter is not NULL. This can be
triggered during certificate verification so could be a DoS attack
against a client or a server enabling client authentication.

Thanks to Loïc Jonas Etienne (Qnective AG) for discovering this bug.

CVE-2015-3194

Reviewed-by: Richard Levitte <levitte@openssl.org>

2015-12-03 14:32:05 +00:00

..

Makefile

Fix the update target and remove duplicate file updates

2015-05-23 06:25:12 +02:00

rsa_ameth.c

Add PSS parameter check.

2015-12-03 14:32:05 +00:00

rsa_asn1.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

rsa_chk.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

rsa_crpt.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

rsa_depr.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

rsa_eay.c

Rerun util/openssl-format-source -v -c .

2015-01-22 09:31:48 +00:00

rsa_err.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

rsa_gen.c

use X9.31 keygen by default in FIPS mode

2015-07-30 14:34:45 +01:00

rsa_lib.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

rsa_locl.h

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

rsa_none.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

rsa_null.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

rsa_oaep.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

rsa_pk1.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

rsa_pmeth.c

Fix buffer overrun in RSA signing

2015-04-30 23:21:53 +01:00

rsa_prn.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

rsa_pss.c

Re-align some comments after running the reformat script.

2015-01-22 09:31:48 +00:00

rsa_saos.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

rsa_sign.c

Don't treat a bare OCTETSTRING as DigestInfo in int_rsa_verify

2015-10-08 14:11:59 +01:00

rsa_ssl.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

rsa_test.c

RT 3493: fix RSA test

2015-09-01 20:02:54 +02:00

rsa_x931.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

rsa.h

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00