generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
openssl/crypto/dsa
History
Dr. Stephen Henson ccb2a61407 Fix double free in DSA private key parsing. 
Fix double free bug when parsing malformed DSA private keys.

Thanks to Adam Langley (Google/BoringSSL) for discovering this bug using
libFuzzer.

CVE-2016-0705

Reviewed-by: Emilia Käsper <emilia@openssl.org>
(cherry picked from commit 6c88c71b4e4825c7bc0489306d062d017634eb88)
2016-02-19 14:04:21 +00:00
..
dsa_ameth.c
Fix double free in DSA private key parsing.
2016-02-19 14:04:21 +00:00
dsa_asn1.c
Run util/openssl-format-source -v -c .
2015-01-22 09:38:39 +00:00
dsa_depr.c
Run util/openssl-format-source -v -c .
2015-01-22 09:38:39 +00:00
dsa_err.c
Run util/openssl-format-source -v -c .
2015-01-22 09:38:39 +00:00
dsa_gen.c
Remove useless code
2015-10-23 20:47:53 +02:00
dsa_key.c
Run util/openssl-format-source -v -c .
2015-01-22 09:38:39 +00:00
dsa_lib.c
Run util/openssl-format-source -v -c .
2015-01-22 09:38:39 +00:00
dsa_locl.h
Run util/openssl-format-source -v -c .
2015-01-22 09:38:39 +00:00
dsa_ossl.c
Fix memory leak in DSA redo case.
2015-12-22 11:54:42 +01:00
dsa_pmeth.c
Run util/openssl-format-source -v -c .
2015-01-22 09:38:39 +00:00
dsa_prn.c
Run util/openssl-format-source -v -c .
2015-01-22 09:38:39 +00:00
dsa_sign.c
Run util/openssl-format-source -v -c .
2015-01-22 09:38:39 +00:00
dsa_vrf.c
Run util/openssl-format-source -v -c .
2015-01-22 09:38:39 +00:00
dsa.h
Run util/openssl-format-source -v -c .
2015-01-22 09:38:39 +00:00
dsagen.c
Run util/openssl-format-source -v -c .
2015-01-22 09:38:39 +00:00
dsatest.c
Run util/openssl-format-source -v -c .
2015-01-22 09:38:39 +00:00
fips186a.txt
Import of old SSLeay release: SSLeay 0.8.1b
1998-12-21 10:52:47 +00:00
Makefile
Fix the update target and remove duplicate file updates
2015-05-23 11:22:10 +02:00
README
Import of old SSLeay release: SSLeay 0.8.1b
1998-12-21 10:52:47 +00:00

README 

The stuff in here is based on patches supplied to me by
Steven Schoch <schoch@sheba.arc.nasa.gov> to do DSS.
I have since modified a them a little but a debt of gratitude
is due for doing the initial work.