Matt Caswell efee575ad4 Fix off-by-one in BN_rand
If BN_rand is called with |bits| set to 1 and |top| set to 1 then a 1 byte
buffer overflow can occur. There are no such instances within the OpenSSL at
the moment.

Thanks to Mateusz Kocielski (LogicalTrust), Marek Kroemeke, Filip Palian for
discovering and reporting this issue.

Reviewed-by: Kurt Roeckx <kurt@openssl.org>
2015-05-22 23:40:38 +01:00
..
2015-05-22 23:40:38 +01:00
2014-12-22 16:23:24 +01:00
2015-05-22 23:10:51 +01:00

 apps/openssl.pod .... Documentation of OpenSSL `openssl' command
 crypto/crypto.pod ... Documentation of OpenSSL crypto.h (libcrypto)
 ssl/ssl.pod ......... Documentation of OpenSSL ssl.h (libssl)
 standards.txt ....... Pointers to standards, RFCs or internet drafts
                       that are related to OpenSSL.  Incomplete.

 HTML versions are on https://www.openssl.org/docs