Dr. Stephen Henson d8541d7e9e Add PSS parameter check. ...

Avoid seg fault by checking mgf1 parameter is not NULL. This can be
triggered during certificate verification so could be a DoS attack
against a client or a server enabling client authentication.

Thanks to Loïc Jonas Etienne (Qnective AG) for discovering this bug.

CVE-2015-3194

Reviewed-by: Matt Caswell <matt@openssl.org>

2015-12-03 13:45:13 +01:00

..

Makefile

Fix the update target and remove duplicate file updates

2015-05-23 11:22:10 +02:00

rsa_ameth.c

Add PSS parameter check.

2015-12-03 13:45:13 +01:00

rsa_asn1.c

Run util/openssl-format-source -v -c .

2015-01-22 09:38:39 +00:00

rsa_chk.c

Run util/openssl-format-source -v -c .

2015-01-22 09:38:39 +00:00

rsa_crpt.c

Run util/openssl-format-source -v -c .

2015-01-22 09:38:39 +00:00

rsa_depr.c

Run util/openssl-format-source -v -c .

2015-01-22 09:38:39 +00:00

rsa_eay.c

Rerun util/openssl-format-source -v -c .

2015-01-22 09:38:49 +00:00

rsa_err.c

Run util/openssl-format-source -v -c .

2015-01-22 09:38:39 +00:00

rsa_gen.c

use X9.31 keygen by default in FIPS mode

2015-07-30 14:35:42 +01:00

rsa_lib.c

Run util/openssl-format-source -v -c .

2015-01-22 09:38:39 +00:00

rsa_locl.h

Run util/openssl-format-source -v -c .

2015-01-22 09:38:39 +00:00

rsa_none.c

Run util/openssl-format-source -v -c .

2015-01-22 09:38:39 +00:00

rsa_null.c

Run util/openssl-format-source -v -c .

2015-01-22 09:38:39 +00:00

rsa_oaep.c

Run util/openssl-format-source -v -c .

2015-01-22 09:38:39 +00:00

rsa_pk1.c

Run util/openssl-format-source -v -c .

2015-01-22 09:38:39 +00:00

rsa_pmeth.c

Fix buffer overrun in RSA signing

2015-04-30 23:27:07 +01:00

rsa_prn.c

Run util/openssl-format-source -v -c .

2015-01-22 09:38:39 +00:00

rsa_pss.c

Re-align some comments after running the reformat script.

2015-01-22 09:39:01 +00:00

rsa_saos.c

Run util/openssl-format-source -v -c .

2015-01-22 09:38:39 +00:00

rsa_sign.c

Don't treat a bare OCTETSTRING as DigestInfo in int_rsa_verify

2015-10-08 14:17:08 +01:00

rsa_ssl.c

Run util/openssl-format-source -v -c .

2015-01-22 09:38:39 +00:00

rsa_test.c

RT 3493: fix RSA test

2015-09-01 20:05:56 +02:00

rsa_x931.c

Run util/openssl-format-source -v -c .

2015-01-22 09:38:39 +00:00

rsa.h

Run util/openssl-format-source -v -c .

2015-01-22 09:38:39 +00:00