Emilia Kasper 3e5df37861 Explicitly check for empty ASN.1 strings in d2i_ECPrivateKey ...

The old code implicitly relies on the ASN.1 code returning a \0-prefixed buffer
when the buffer length is 0. Change this to verify explicitly that the ASN.1 string
has positive length.

Reviewed-by: Dr Stephen Henson <steve@openssl.org>
(cherry picked from commit 82dc08de54ce443c2a9ac478faffe79e76157795)

2014-08-27 19:50:36 +02:00

..

.cvsignore

Add emacs cache files to .cvsignore.

2005-04-11 14:17:07 +00:00

ec2_mult.c

Fix for CVE-2014-0076

2014-03-12 14:19:54 +00:00

ec2_oct.c

Reorganise ECC code so it can use FIPS module.

2011-06-06 12:54:51 +00:00

ec2_smpl.c

Only use FIPS EC methods in FIPS mode.

2014-08-07 01:08:14 +01:00

ec_ameth.c

RT3065: ec_private_key_dont_crash

2014-08-27 19:50:36 +02:00

ec_asn1.c

Explicitly check for empty ASN.1 strings in d2i_ECPrivateKey

2014-08-27 19:50:36 +02:00

ec_check.c

fix error found by coverity: check if ctx is != NULL before calling BN_CTX_end()

2006-03-13 23:14:57 +00:00

ec_curve.c

Fix warnings.

2011-10-19 08:58:35 +00:00

ec_cvt.c

ec_cvt.c: performance update from HEAD.

2011-11-14 21:14:53 +00:00

ec_err.c

Improve optional 64-bit NIST-P224 implementation, and add NIST-P256 and

2011-10-18 19:43:54 +00:00

ec_key.c

Fix EC_KEY initialization race.

2012-10-05 20:51:12 +00:00

ec_lcl.h

Corrected OPENSSL_NO_EC_NISTP_64_GCC_128 usage in ec_lcl.h. PR#3370

2014-06-03 23:19:21 +01:00

ec_lib.c

"EC_POINT_invert" was checking "dbl" function pointer instead of "invert".

2014-07-21 22:28:40 +01:00

ec_mult.c

ECC library bugfixes.

2010-08-26 12:10:57 +00:00

ec_oct.c

Make no-ec2m work again (backport from HEAD).

2011-06-06 13:00:30 +00:00

ec_pmeth.c

Reduce version skew.

2012-06-08 09:18:47 +00:00

ec_print.c

fix memory leak

2002-06-06 10:33:05 +00:00

ec.h

Further improve/fix ec_GFp_simple_points_make_affine (ecp_smpl.c) and

2014-08-13 17:44:53 +02:00

eck_prn.c

Backport from HEAD:

2011-06-06 11:49:36 +00:00

ecp_mont.c

Only use FIPS EC methods in FIPS mode.

2014-08-07 01:08:14 +01:00

ecp_nist.c

Only use FIPS EC methods in FIPS mode.

2014-08-07 01:08:14 +01:00

ecp_nistp224.c

For OpenVMS, use inttypes.h instead of stdint.h

2012-03-01 21:29:16 +00:00

ecp_nistp256.c

For OpenVMS, use inttypes.h instead of stdint.h

2012-03-01 21:29:16 +00:00

ecp_nistp521.c

For OpenVMS, use inttypes.h instead of stdint.h

2012-03-01 21:29:16 +00:00

ecp_nistputil.c

Fix warnings.

2011-10-19 08:58:35 +00:00

ecp_oct.c

Reorganise ECC code so it can use FIPS module.

2011-06-06 12:54:51 +00:00

ecp_smpl.c

Further improve/fix ec_GFp_simple_points_make_affine (ecp_smpl.c) and

2014-08-13 17:44:53 +02:00

ectest.c

Further improve/fix ec_GFp_simple_points_make_affine (ecp_smpl.c) and

2014-08-13 17:44:53 +02:00

Makefile

make update

2014-01-06 13:33:27 +00:00