openssl

History

Dr. Stephen Henson 8d038a08fb The fix for CVE-2012-2110 did not take into account that the

'len' argument to BUF_MEM_grow and BUF_MEM_grow_clean is an
int in OpenSSL 0.9.8, making it still vulnerable. Fix by
rejecting negative len parameter.

Thanks to the many people who reported this bug and to Tomas Hoger
<thoger@redhat.com> for supplying the fix.

2012-04-23 20:35:55 +00:00

.cvsignore

Add emacs cache files to .cvsignore.

2005-04-11 14:17:07 +00:00

buf_err.c

Rebuild error file C source files.

2006-11-21 20:14:46 +00:00

buf_str.c

Merge minor FIPS branch changes: buffer, objects, pem, x509.

2008-09-15 19:56:12 +00:00

buffer.c

The fix for CVE-2012-2110 did not take into account that the