Emilia Kasper 0042fb5fd1 Fix OID handling: ...

- Upon parsing, reject OIDs with invalid base-128 encoding.
- Always NUL-terminate the destination buffer in OBJ_obj2txt printing function.

CVE-2014-3508

Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
Reviewed-by: Kurt Roeckx <kurt@openssl.org>
Reviewed-by: Tim Hudson <tjh@openssl.org>

2014-08-06 20:36:41 +01:00

..

.cvsignore

Add emacs cache files to .cvsignore.

2005-04-11 14:17:07 +00:00

Makefile

Change AR to ARX to allow exclusion of fips object modules

2011-01-26 16:08:08 +00:00

o_names.c

Fix some clang warnings.

2013-01-13 21:04:39 +00:00

obj_dat.c

Fix OID handling:

2014-08-06 20:36:41 +01:00

obj_dat.h

Rebuild OID table.

2014-06-27 14:35:07 +01:00

obj_dat.pl

Fix OID encoding for one component.

2014-06-27 14:35:07 +01:00

obj_err.c

Update from 0.9.8 stable. Eliminate duplicate error codes.

2006-11-21 21:29:44 +00:00

obj_lib.c

Revert the size_t modifications from HEAD that had led to more

2008-11-12 03:58:08 +00:00

obj_mac.h

CABForum EV OIDs for Subject Jurisdiction of Incorporation or Registration.

2014-02-26 15:33:11 +00:00

obj_mac.num

CABForum EV OIDs for Subject Jurisdiction of Incorporation or Registration.

2014-02-26 15:33:11 +00:00

obj_xref.c

? crypto/aes/aes-armv4.S

2011-10-06 20:44:02 +00:00

obj_xref.h

Add new OIDs from RFC5753

2013-07-17 21:45:00 +01:00

obj_xref.txt

Add new OIDs from RFC5753

2013-07-17 21:45:00 +01:00

objects.h

Updates from 1.0.0-stable

2009-04-04 19:54:06 +00:00

objects.pl

Produce meaningful error if sanity check fails.

2008-03-19 17:01:12 +00:00

objects.README

…

objects.txt

CABForum EV OIDs for Subject Jurisdiction of Incorporation or Registration.

2014-02-26 15:33:11 +00:00

objxref.pl

objxref.pl: improve portability.

2012-04-22 21:18:30 +00:00