Mark J. Cox 951dfbb13a Introduce limits to prevent malicious keys being able to ...

cause a denial of service.  (CVE-2006-2940)
[Steve Henson, Bodo Moeller]

Fix ASN.1 parsing of certain invalid structures that can result
in a denial of service.  (CVE-2006-2937)  [Steve Henson]

Fix buffer overflow in SSL_get_shared_ciphers() function.
(CVE-2006-3738) [Tavis Ormandy and Will Drewry, Google Security Team]

Fix SSL client code which could crash if connecting to a
malicious SSLv2 server.  (CVE-2006-4343)
[Tavis Ormandy and Will Drewry, Google Security Team]

2006-09-28 11:29:03 +00:00

..

.cvsignore

Add emacs cache files to .cvsignore.

2005-04-11 14:17:07 +00:00

ec2_mult.c

Fix various incorrect error function codes.

2005-04-26 18:53:22 +00:00

ec2_smpl.c

fix error found by coverity: check if ctx is != NULL before calling BN_CTX_end()

2006-03-13 23:12:08 +00:00

ec2_smpt.c

Improve error handling if decompression of an ec point fails, and cleanup

2004-07-06 15:50:04 +00:00

ec_asn1.c

Introduce limits to prevent malicious keys being able to

2006-09-28 11:29:03 +00:00

ec_check.c

fix error found by coverity: check if ctx is != NULL before calling BN_CTX_end()

2006-03-13 23:12:08 +00:00

ec_curve.c

comment

2005-12-13 05:46:30 +00:00

ec_cvt.c

Sun has agreed to removing the covenant language from most files.

2002-10-29 10:59:32 +00:00

ec_err.c

Introduce limits to prevent malicious keys being able to

2006-09-28 11:29:03 +00:00

ec_key.c

simplify EC_KEY_dup

2005-05-17 12:23:16 +00:00

ec_lcl.h

ecc api cleanup; summary:

2005-05-16 10:11:04 +00:00

ec_lib.c

backport recent changes from the cvs head

2006-02-08 19:16:33 +00:00

ec_mult.c

fix error found by coverity: check if ctx is != NULL before calling BN_CTX_end()

2006-03-14 22:48:31 +00:00

ec_print.c

fix memory leak

2002-06-06 10:33:05 +00:00

ec.h

Introduce limits to prevent malicious keys being able to

2006-09-28 11:29:03 +00:00

ecp_mont.c

Fix various incorrect error function codes.

2005-04-26 18:53:22 +00:00

ecp_nist.c

remove OPENSSL_NO_ASM dependency

2005-06-28 15:03:58 +00:00

ecp_smpl.c

fix error found by coverity: check if ctx is != NULL before calling BN_CTX_end()

2006-03-13 23:12:08 +00:00

ectest.c

fix warnings when building openssl with (gcc 3.3.1):

2005-08-28 23:20:52 +00:00

Makefile

Further BUILDENV refinement, further fool-proofing of Makefiles and

2005-05-16 16:55:47 +00:00