Emilia Kasper 9bc3665ac9 Fix length checks in X509_cmp_time to avoid out-of-bounds reads. ...

Also tighten X509_cmp_time to reject more than three fractional
seconds in the time; and to reject trailing garbage after the offset.

CVE-2015-1789

Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
Reviewed-by: Richard Levitte <levitte@openssl.org>

2015-06-11 14:52:39 +01:00

..

.cvsignore

Add emacs cache files to .cvsignore.

2005-04-11 14:17:07 +00:00

by_dir.c

Re-align some comments after running the reformat script.

2015-01-22 09:31:48 +00:00

by_file.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

Makefile

Fix the update target and remove duplicate file updates

2015-05-23 06:25:12 +02:00

vpm_int.h

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

x509_att.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

x509_cmp.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

x509_d2.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

x509_def.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

x509_err.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

x509_ext.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

x509_lu.c

Add NULL checks from master

2015-05-13 12:55:03 -04:00

x509_obj.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

x509_r2x.c

Re-align some comments after running the reformat script.

2015-01-22 09:31:48 +00:00

x509_req.c

Check public key is not NULL.

2015-03-02 15:26:41 +00:00

x509_set.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

x509_trs.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

x509_txt.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

x509_v3.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

x509_vfy.c

Fix length checks in X509_cmp_time to avoid out-of-bounds reads.

2015-06-11 14:52:39 +01:00

x509_vfy.h

Add flag to inhibit checking for alternate certificate chains. Setting this

2015-04-20 13:42:17 +01:00

x509_vpm.c

Fix cut/paste error

2015-05-04 10:54:18 -04:00

x509.h

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

x509cset.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

x509name.c

Re-align some comments after running the reformat script.

2015-01-22 09:31:48 +00:00

x509rset.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

x509spki.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

x509type.c

Correctly check for export size limit

2015-05-20 22:19:34 +02:00

x_all.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00