generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
f34a57202b
openssl/crypto
History
Emilia Kasper f34a57202b Explicitly check for empty ASN.1 strings in d2i_ECPrivateKey 
The old code implicitly relies on the ASN.1 code returning a \0-prefixed buffer
when the buffer length is 0. Change this to verify explicitly that the ASN.1 string
has positive length.

Reviewed-by: Dr Stephen Henson <steve@openssl.org>
2014-08-27 19:49:35 +02:00
..
aes x86_64 assembly pack: improve masm support. 2014-07-09 20:08:01 +02:00
asn1 RT1815: More const'ness improvements 2014-08-18 11:49:16 -04:00
bf Change AR to ARX to allow exclusion of fips object modules 2011-01-26 16:08:08 +00:00
bio rtcp_new: return failure if allocation of bi->ptr failed 2014-08-15 22:38:05 +02:00
bn bn/asm/rsaz-*.pl: allow spaces in Perl path name. 2014-08-21 00:17:45 +02:00
buffer Check length first in BUF_strnlen(). 2014-05-22 10:13:22 +01:00
camellia x86_64 assembly pack: make Windows build more robust. 2013-01-22 22:27:28 +01:00
cast Please Clang's sanitizer. 2014-07-08 22:24:44 +02:00
cmac Add functions returning security bits. 2014-03-28 14:49:04 +00:00
cms cms_SignerInfo_content_sign: free sig on failure path 2014-08-15 22:38:19 +02:00
comp Assorted bugfixes: 2011-02-03 12:03:51 +00:00
conf RT1815: More const'ness improvements 2014-08-18 11:49:16 -04:00
des Undo a90081576c 2014-08-09 08:02:20 -04:00
dh Add functions returning security bits. 2014-03-28 14:49:04 +00:00
dsa RT3061: slightly amend patch 2014-08-22 15:23:33 +02:00
dso Fix a wrong parameter count ERR_add_error_data 2014-05-19 22:10:14 +01:00
ec Explicitly check for empty ASN.1 strings in d2i_ECPrivateKey 2014-08-27 19:49:35 +02:00
ecdh make depend 2014-02-19 20:09:08 +00:00
ecdsa RT2492: Remove extra NULL check. 2014-08-18 17:41:24 -04:00
engine RT1815: More const'ness improvements 2014-08-18 11:49:16 -04:00
err misspellings fixes by https://github.com/vlajos/misspell_fixer 2013-09-05 21:39:42 +01:00
evp Fix build when BSAES_ASM is defined but VPAES_ASM is not 2014-08-21 15:42:57 +02:00
hmac old_hmac_encode: check for NULL result when allocating *pder 2014-08-17 18:52:44 +02:00
idea Fix typo in ideatest.c 2014-06-28 00:06:13 +01:00
jpake hashbn: check for NULL result when allocating bin and return an error if it fails all (in)direct callers of hashbn: propagate potential error in hashbn 2014-08-17 18:54:39 +02:00
krb5 Change AR to ARX to allow exclusion of fips object modules 2011-01-26 16:08:08 +00:00
lhash Change AR to ARX to allow exclusion of fips object modules 2011-01-26 16:08:08 +00:00
md2 Change AR to ARX to allow exclusion of fips object modules 2011-01-26 16:08:08 +00:00
md4 Undo a90081576c 2014-08-09 08:02:20 -04:00
md5 Undo a90081576c 2014-08-09 08:02:20 -04:00
mdc2 Update dependencies. 2011-02-21 17:51:59 +00:00
modes Engage GHASH for PowerISA 2.0.7. 2014-07-20 14:16:31 +02:00
objects Fix OID handling: 2014-08-06 20:36:41 +01:00
ocsp RT2489: Remove extra "sig" local variable. 2014-08-18 17:36:49 -04:00
pem Sanity check keylength in PVK files. 2014-07-06 00:36:16 +01:00
perlasm Undo a90081576c 2014-08-09 08:02:20 -04:00
pkcs7 Remove ancient obsolete files under pkcs7. 2014-06-26 23:56:34 +01:00
pkcs12 Fix memory leak. 2014-05-29 14:33:32 +01:00
pqueue Change AR to ARX to allow exclusion of fips object modules 2011-01-26 16:08:08 +00:00
rand Create ~/.rnd with mode 0600 instead of 0666 2014-06-08 21:15:48 +01:00
rc2 misspellings fixes by https://github.com/vlajos/misspell_fixer 2013-09-05 21:39:42 +01:00
rc4 Please Clang's sanitizer. 2014-07-08 22:24:44 +02:00
rc5 Update support for Intel compiler: add linux-x86_64-icc and fix problems. 2012-11-28 13:05:13 +00:00
ripemd Undo a90081576c 2014-08-09 08:02:20 -04:00
rsa RT2163: Remove some unneeded #include's 2014-08-18 12:50:00 -04:00
seed seed.c: incredibly enough seed.c can fail to compile on Solaris with certain 2012-02-26 21:52:43 +00:00
sha sha1-mb-x86_64.pl: add commentary. 2014-08-21 00:15:40 +02:00
srp Fix SRP buffer overrun vulnerability. 2014-08-06 20:36:41 +01:00
stack Implement sk_deep_copy. 2014-06-22 20:24:18 -04:00
store Change AR to ARX to allow exclusion of fips object modules 2011-01-26 16:08:08 +00:00
threads Functional VMS changes submitted by sms@antinode.info (Steven M. Schweda). 2009-05-15 16:36:56 +00:00
ts RT1815: More const'ness improvements 2014-08-18 11:49:16 -04:00
txt_db Change AR to ARX to allow exclusion of fips object modules 2011-01-26 16:08:08 +00:00
ui UI_construct_prompt: check for NULL when allocating prompt 2014-08-17 18:54:49 +02:00
whrlpool x86_64 assembly pack: make Windows build more robust. 2013-01-22 22:27:28 +01:00
x509 NETSCAPE_SPKI_b64_encode: free der_spki and b64_str on error path 2014-08-17 18:55:12 +02:00
x509v3 process_pci_value: free (*policy)->data before setting to NULL after failed realloc 2014-08-17 18:56:35 +02:00
.cvsignore Apply mingw patches as supplied by Roumen Petrov an Alon Bar-Lev 2008-04-17 10:19:16 +00:00
alphacpuid.pl alphacpuid.pl: fix alignment bug. 2011-08-12 12:28:52 +00:00
arm64cpuid.S Add linux-aarch64 taget. 2014-06-01 17:21:06 +02:00
arm_arch.h Add linux-aarch64 taget. 2014-06-01 17:21:06 +02:00
armcap.c Add linux-aarch64 taget. 2014-06-01 17:21:06 +02:00
armv4cpuid.S ARM assembly pack: get ARMv7 instruction endianness right. 2014-06-06 21:27:18 +02:00
c64xpluscpuid.pl C64x+ assembly pack: make it work with older toolchain. 2014-05-04 16:38:32 +02:00
cpt_err.c Implement FIPS_mode and FIPS_mode_set 2011-05-19 18:09:02 +00:00
cryptlib.c Avoid Windows 8 Getversion deprecated errors. 2014-02-25 13:40:33 +00:00
cryptlib.h Add a symbol for the first parameter to OPENSSL_showfatal(). 2011-06-23 09:46:27 +00:00
crypto-lib.com Move CT viewer extension code to crypto/x509v3 2014-02-20 18:48:56 +00:00
crypto.h Move gmtime functions to crypto.h. 2014-02-19 18:02:04 +00:00
cversion.c (oops) Apologies all, that last header-cleanup commit was from the wrong 2004-04-19 18:09:28 +00:00
ebcdic.c Oops, this file already had the "empty source file" workaround but it 2003-10-29 22:25:04 +00:00
ebcdic.h
ex_data.c Avoid warnings with -pedantic, specifically: 2008-07-04 23:12:52 +00:00
fips_err.h Check for selftest failure in various places. 2011-10-22 17:24:27 +00:00
fips_ers.c Rename crypto/fips_err.c to fips_ers.c to avoid clash with other fips_err.c 2011-02-03 16:16:30 +00:00
ia64cpuid.S IA-64 assembler pack: fix typos and make it work on HP-UX. 2011-05-07 20:36:05 +00:00
install-crypto.com After some adjustments, apply the changes OpenSSL 1.0.0d on OpenVMS 2011-03-19 10:58:14 +00:00
lock.c Include support for an add_lock callback to tiny FIPS locking API. 2011-02-14 17:05:42 +00:00
LPdir_nyi.c Copy a few files from LPlib (a new project of mine), add a wrapper. 2004-07-10 13:16:02 +00:00
LPdir_unix.c Import changed files from LPlib. The changes are logged as follows 2004-09-23 22:11:39 +00:00
LPdir_vms.c After some adjustments, apply the changes OpenSSL 1.0.0d on OpenVMS 2011-03-19 10:58:14 +00:00
LPdir_win32.c Import changed files from LPlib. The changes are logged as follows 2004-09-23 22:11:39 +00:00
LPdir_win.c Fix mingw warnings. 2006-10-23 07:41:05 +00:00
LPdir_wince.c Import changed files from LPlib. The changes are logged as follows 2004-09-23 22:11:39 +00:00
Makefile make depend 2014-02-19 20:09:08 +00:00
md32_common.h Please Clang's sanitizer. 2014-07-08 22:24:44 +02:00
mem_clr.c Fix warning. 2007-06-23 18:47:51 +00:00
mem_dbg.c Updates from 1.0.0-stable branch. 2009-04-20 11:33:12 +00:00
mem.c Version skew reduction: trivia (I hope). 2012-06-03 22:00:21 +00:00
o_dir_test.c Copy a few files from LPlib (a new project of mine), add a wrapper. 2004-07-10 13:16:02 +00:00
o_dir.c Undo a90081576c 2014-08-09 08:02:20 -04:00
o_dir.h Copy a few files from LPlib (a new project of mine), add a wrapper. 2004-07-10 13:16:02 +00:00
o_fips.c Implement FIPS_mode and FIPS_mode_set 2011-05-19 18:09:02 +00:00
o_init.c remove unnecessary attempt to automatically call OPENSSL_init 2012-07-01 22:25:04 +00:00
o_str.c Improve WINCE support. 2013-01-19 21:23:13 +01:00
o_str.h "Overload" SunOS 4.x memcmp, which ruins ASN1_OBJECT table lookups. 2005-09-20 20:19:07 +00:00
o_time.c Move gmtime functions to crypto.h. 2014-02-19 18:02:04 +00:00
opensslconf.h.in Eliminate warning induced by http://cvs.openssl.org/chngview?cn=14690 and 2005-12-16 10:37:24 +00:00
opensslv.h HEAD is now 1.1.0 2009-03-31 10:38:37 +00:00
ossl_typ.h Add KDF for DH. 2013-08-05 15:45:01 +01:00
pariscid.pl PA-RISC assembler pack: switch to bve in 64-bit builds. 2013-06-18 10:37:00 +02:00
ppc_arch.h Engage GHASH for PowerISA 2.0.7. 2014-07-20 14:16:31 +02:00
ppccap.c Engage GHASH for PowerISA 2.0.7. 2014-07-20 14:16:31 +02:00
ppccpuid.pl aesp8-ppc.pl: fix typos. 2014-06-04 08:34:18 +02:00
s390xcap.c s390x assembler pack: extend OPENSSL_s390xcap_P to 128 bits. 2010-09-18 08:46:53 +00:00
s390xcpuid.S Multiple assembler packs: add experimental memory bus instrumentation. 2011-04-17 12:46:00 +00:00
sparc_arch.h Support for SPARC T4 MONT[MUL|SQR] instructions. 2012-11-17 10:34:11 +00:00
sparccpuid.S sparccpuid.S: work around emulator bug on T1. 2013-02-11 10:39:50 +01:00
sparcv9cap.c sparcv9cap.c: omit random detection. 2013-12-28 13:31:14 +01:00
symhacks.h Remove all RFC5878 code. 2014-07-04 13:26:35 +01:00
thr_id.c Fix warning. 2012-09-17 17:21:58 +00:00
uid.c Netware-specific changes, 2003-11-28 13:10:58 +00:00
vms_rms.h After some adjustments, apply the changes OpenSSL 1.0.0d on OpenVMS 2011-03-19 10:58:14 +00:00
x86_64cpuid.pl x86[_64]cpuid.pl: add low-level RDSEED. 2014-02-14 17:24:12 +01:00
x86cpuid.pl Undo a90081576c 2014-08-09 08:02:20 -04:00