generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
openssl/ssl
History
Matt Caswell 41d049e1cd Return errors even if the cookie validation has succeeded 
In the DTLS ClientHello processing the return value is stored in |ret| which
by default is -1. We wish to return 1 on success or 2 on success *and* we
have validated the DTLS cookie. Previously on successful validation of the
cookie we were setting |ret| to 2. Unfortunately if we later encounter an
error then we can end up returning a successful (positive) return code from
the function because we already set |ret| to a positive value.

This does not appear to have a security consequence because the handshake
just fails at a later point.

Reviewed-by: Andy Polyakov <appro@openssl.org>
2015-11-30 10:51:43 +00:00
..
bio_ssl.c
Handle SSL_ERROR_WANT_X509_LOOKUP
2015-09-20 14:22:52 +01:00
clienthellotest.c
Add test for SSL_set_session_ticket_ext
2015-07-27 16:14:02 +01:00
d1_both.c
Fix "make test" seg fault with SCTP enabled
2015-08-11 22:27:05 +01:00
d1_clnt.c
Only call ssl3_init_finished_mac once for DTLS
2015-11-10 18:47:57 +00:00
d1_enc.c
Run util/openssl-format-source -v -c .
2015-01-22 09:38:39 +00:00
d1_lib.c
Clear state in DTLSv1_listen
2015-06-02 09:12:39 +01:00
d1_meth.c
Run util/openssl-format-source -v -c .
2015-01-22 09:38:39 +00:00
d1_pkt.c
Lost alert in DTLS
2015-05-22 10:24:49 +01:00
d1_srtp.c
Run util/openssl-format-source -v -c .
2015-01-22 09:38:39 +00:00
d1_srvr.c
Stop DTLS servers asking for unsafe legacy renegotiation
2015-11-10 19:27:25 +00:00
dtls1.h
Fix d2i_SSL_SESSION for DTLS1_BAD_VER
2015-02-27 20:32:49 +00:00
heartbeat_test.c
Run util/openssl-format-source -v -c .
2015-01-22 09:38:39 +00:00
install-ssl.com
Don't forget to install srtp.h as well
2012-05-10 15:01:22 +00:00
kssl_lcl.h
Run util/openssl-format-source -v -c .
2015-01-22 09:38:39 +00:00
kssl.c
Re-align some comments after running the reformat script.
2015-01-22 09:39:01 +00:00
kssl.h
Run util/openssl-format-source -v -c .
2015-01-22 09:38:39 +00:00
Makefile
Add test for SSL_set_session_ticket_ext
2015-07-27 16:14:02 +01:00
s2_clnt.c
Run util/openssl-format-source -v -c .
2015-01-22 09:38:39 +00:00
s2_enc.c
Run util/openssl-format-source -v -c .
2015-01-22 09:38:39 +00:00
s2_lib.c
Fix reachable assert in SSLv2 servers.
2015-03-19 12:59:31 +00:00
s2_meth.c
Run util/openssl-format-source -v -c .
2015-01-22 09:38:39 +00:00
s2_pkt.c
Add length sanity check in SSLv2 n_do_ssl_write()
2015-04-29 17:44:02 +01:00
s2_srvr.c
Harden SSLv2-supporting servers against Bleichenbacher's attack.
2015-04-08 16:42:28 +02:00
s3_both.c
Sanity check the return from final_finish_mac
2015-04-30 23:27:05 +01:00
s3_cbc.c
Ensure all EVP calls have their returns checked where appropriate
2015-11-20 15:56:42 +00:00
s3_clnt.c
Ensure all EVP calls have their returns checked where appropriate
2015-11-20 15:56:42 +00:00
s3_enc.c
Ensure all EVP calls have their returns checked where appropriate
2015-11-20 15:56:42 +00:00
s3_lib.c
ssl3_free(): Return if it wasn't created
2015-11-24 21:56:39 +01:00
s3_meth.c
Run util/openssl-format-source -v -c .
2015-01-22 09:38:39 +00:00
s3_pkt.c
Don't send an alert if we've just received one
2015-05-25 23:11:02 +01:00
s3_srvr.c
Return errors even if the cookie validation has succeeded
2015-11-30 10:51:43 +00:00
s23_clnt.c
Fix session resumption
2015-09-02 00:31:33 +01:00
s23_lib.c
Run util/openssl-format-source -v -c .
2015-01-22 09:38:39 +00:00
s23_meth.c
Run util/openssl-format-source -v -c .
2015-01-22 09:38:39 +00:00
s23_pkt.c
Run util/openssl-format-source -v -c .
2015-01-22 09:38:39 +00:00
s23_srvr.c
Re-align some comments after running the reformat script.
2015-01-22 09:39:01 +00:00
srtp.h
Run util/openssl-format-source -v -c .
2015-01-22 09:38:39 +00:00
ssl2.h
Run util/openssl-format-source -v -c .
2015-01-22 09:38:39 +00:00
ssl3.h
Add test for SSL_set_session_ticket_ext
2015-07-27 16:14:02 +01:00
ssl23.h
Run util/openssl-format-source -v -c .
2015-01-22 09:38:39 +00:00
ssl_algs.c
Run util/openssl-format-source -v -c .
2015-01-22 09:38:39 +00:00
ssl_asn1.c
Make no-psk compile without warnings.
2015-09-16 18:12:04 +01:00
ssl_cert.c
Set reference count earlier
2015-11-24 21:53:40 +01:00
ssl_ciph.c
Ensure all EVP calls have their returns checked where appropriate
2015-11-20 15:56:42 +00:00
ssl_err2.c
Run util/openssl-format-source -v -c .
2015-01-22 09:38:39 +00:00
ssl_err.c
Ensure all EVP calls have their returns checked where appropriate
2015-11-20 15:56:42 +00:00
ssl_lib.c
Set reference count earlier
2015-11-24 21:53:40 +01:00
ssl_locl.h
Ensure all EVP calls have their returns checked where appropriate
2015-11-20 15:56:42 +00:00
ssl_rsa.c
Ensure all EVP calls have their returns checked where appropriate
2015-11-20 15:56:42 +00:00
ssl_sess.c
Fix building with OPENSSL_NO_TLSEXT.
2015-09-02 00:07:24 +01:00
ssl_stat.c
Add Error state
2015-05-05 20:07:48 +01:00
ssl_task.c
Re-align some comments after running the reformat script.
2015-01-22 09:39:01 +00:00
ssl_txt.c
Run util/openssl-format-source -v -c .
2015-01-22 09:38:39 +00:00
ssl_utst.c
Run util/openssl-format-source -v -c .
2015-01-22 09:38:39 +00:00
ssl-lib.com
Spaces were added in some strings for better readability. However, those spaces do not belong in file names, so when picking out the individual parts, remove the spaces
2014-10-15 10:49:24 +02:00
ssl.h
Ensure all EVP calls have their returns checked where appropriate
2015-11-20 15:56:42 +00:00
ssltest.c
Fix ssltest to use 1024-bit DHE parameters
2015-05-26 12:41:51 +02:00
t1_clnt.c
Run util/openssl-format-source -v -c .
2015-01-22 09:38:39 +00:00
t1_enc.c
Ensure all EVP calls have their returns checked where appropriate
2015-11-20 15:56:42 +00:00
t1_lib.c
Ensure all EVP calls have their returns checked where appropriate
2015-11-20 15:56:42 +00:00
t1_meth.c
Run util/openssl-format-source -v -c .
2015-01-22 09:38:39 +00:00
t1_reneg.c
Run util/openssl-format-source -v -c .
2015-01-22 09:38:39 +00:00
t1_srvr.c
Run util/openssl-format-source -v -c .
2015-01-22 09:38:39 +00:00
tls1.h
Fix references to various RFCs
2015-10-23 20:43:09 +02:00
tls_srp.c
Code style: space after 'if'
2015-04-16 13:51:51 -04:00