wbrawner/openssl
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
openssl/crypto
History
Emilia Kasper 0042fb5fd1 Fix OID handling: 
- Upon parsing, reject OIDs with invalid base-128 encoding.
- Always NUL-terminate the destination buffer in OBJ_obj2txt printing function.

CVE-2014-3508

Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
Reviewed-by: Kurt Roeckx <kurt@openssl.org>
Reviewed-by: Tim Hudson <tjh@openssl.org>
2014-08-06 20:36:41 +01:00
..
aes x86_64 assembly pack: improve masm support. 2014-07-09 20:08:01 +02:00
asn1 Fix OID handling: 2014-08-06 20:36:41 +01:00
bf Change AR to ARX to allow exclusion of fips object modules 2011-01-26 16:08:08 +00:00
bio Fix memory leak in BIO_free if there is no destroy function. 2014-07-09 23:29:17 +01:00
bn Fixed valgrind complaint due to BN_consttime_swap reading uninitialised data. 2014-07-13 22:17:39 +01:00
buffer Check length first in BUF_strnlen(). 2014-05-22 10:13:22 +01:00
camellia x86_64 assembly pack: make Windows build more robust. 2013-01-22 22:27:28 +01:00
cast Please Clang's sanitizer. 2014-07-08 22:24:44 +02:00
cmac Add functions returning security bits. 2014-03-28 14:49:04 +00:00
cms Don't clean up uninitialised EVP_CIPHER_CTX on error (CID 483259). 2014-07-10 17:49:02 +01:00
comp Assorted bugfixes: 2011-02-03 12:03:51 +00:00
conf Prevent infinite loop loading config files. 2014-07-07 13:19:57 +01:00
des SPARC T4 assembly pack: treat zero input length in CBC. 2014-03-07 10:30:37 +01:00
dh Add functions returning security bits. 2014-03-28 14:49:04 +00:00
dsa Add functions returning security bits. 2014-03-28 14:49:04 +00:00
dso Fix a wrong parameter count ERR_add_error_data 2014-05-19 22:10:14 +01:00
ec Simplify and fix ec_GFp_simple_points_make_affine 2014-08-01 17:18:14 +02:00
ecdh make depend 2014-02-19 20:09:08 +00:00
ecdsa Accessor functions for app_data in ECDSA_METHOD 2014-07-01 12:01:51 +01:00
engine Windows build fixes. 2014-07-19 22:57:37 +01:00
err misspellings fixes by https://github.com/vlajos/misspell_fixer 2013-09-05 21:39:42 +01:00
evp Engage GHASH for PowerISA 2.0.7. 2014-07-20 14:16:31 +02:00
hmac Add functions returning security bits. 2014-03-28 14:49:04 +00:00
idea Fix typo in ideatest.c 2014-06-28 00:06:13 +01:00
jpake Change AR to ARX to allow exclusion of fips object modules 2011-01-26 16:08:08 +00:00
krb5 Change AR to ARX to allow exclusion of fips object modules 2011-01-26 16:08:08 +00:00
lhash Change AR to ARX to allow exclusion of fips object modules 2011-01-26 16:08:08 +00:00
md2 Change AR to ARX to allow exclusion of fips object modules 2011-01-26 16:08:08 +00:00
md4 Fix some clang warnings. 2013-01-13 21:04:39 +00:00
md5 md5/asm/md5-[586|x86_64].pl: +15% on Atom. 2014-05-04 16:56:00 +02:00
mdc2 Update dependencies. 2011-02-21 17:51:59 +00:00
modes Engage GHASH for PowerISA 2.0.7. 2014-07-20 14:16:31 +02:00
objects Fix OID handling: 2014-08-06 20:36:41 +01:00
ocsp Handle IPv6 addresses in OCSP_parse_url. 2014-06-27 17:30:59 +01:00
pem Sanity check keylength in PVK files. 2014-07-06 00:36:16 +01:00
perlasm x86_64 assembly pack: improve masm support. 2014-07-09 20:08:01 +02:00
pkcs7 Remove ancient obsolete files under pkcs7. 2014-06-26 23:56:34 +01:00
pkcs12 Fix memory leak. 2014-05-29 14:33:32 +01:00
pqueue Change AR to ARX to allow exclusion of fips object modules 2011-01-26 16:08:08 +00:00
rand Create ~/.rnd with mode 0600 instead of 0666 2014-06-08 21:15:48 +01:00
rc2 misspellings fixes by https://github.com/vlajos/misspell_fixer 2013-09-05 21:39:42 +01:00
rc4 Please Clang's sanitizer. 2014-07-08 22:24:44 +02:00
rc5 Update support for Intel compiler: add linux-x86_64-icc and fix problems. 2012-11-28 13:05:13 +00:00
ripemd misspellings fixes by https://github.com/vlajos/misspell_fixer 2013-09-05 21:39:42 +01:00
rsa Return smaller of ret and f. 2014-07-05 22:37:41 +01:00
seed seed.c: incredibly enough seed.c can fail to compile on Solaris with certain 2012-02-26 21:52:43 +00:00
sha sha1-ppc.pl: shave off one cycle from BODY_20_39 2014-07-21 15:29:09 +02:00
srp Constification - mostly originally from Chromium. 2014-06-29 21:05:23 +01:00
stack Implement sk_deep_copy. 2014-06-22 20:24:18 -04:00
store Change AR to ARX to allow exclusion of fips object modules 2011-01-26 16:08:08 +00:00
threads Functional VMS changes submitted by sms@antinode.info (Steven M. Schweda). 2009-05-15 16:36:56 +00:00
ts Fix double frees. 2014-04-22 16:58:43 +01:00
txt_db Change AR to ARX to allow exclusion of fips object modules 2011-01-26 16:08:08 +00:00
ui * crypto/ui/ui_lib.c: misplaced brace in switch statement. 2014-07-13 19:11:46 +02:00
whrlpool x86_64 assembly pack: make Windows build more robust. 2013-01-22 22:27:28 +01:00
x509 Update API to use (char *) for email addresses and hostnames 2014-07-07 19:11:38 +10:00
x509v3 Update API to use (char *) for email addresses and hostnames 2014-07-07 19:11:38 +10:00
.cvsignore Apply mingw patches as supplied by Roumen Petrov an Alon Bar-Lev 2008-04-17 10:19:16 +00:00
alphacpuid.pl alphacpuid.pl: fix alignment bug. 2011-08-12 12:28:52 +00:00
arm64cpuid.S Add linux-aarch64 taget. 2014-06-01 17:21:06 +02:00
arm_arch.h Add linux-aarch64 taget. 2014-06-01 17:21:06 +02:00
armcap.c Add linux-aarch64 taget. 2014-06-01 17:21:06 +02:00
armv4cpuid.S ARM assembly pack: get ARMv7 instruction endianness right. 2014-06-06 21:27:18 +02:00
c64xpluscpuid.pl C64x+ assembly pack: make it work with older toolchain. 2014-05-04 16:38:32 +02:00
cpt_err.c Implement FIPS_mode and FIPS_mode_set 2011-05-19 18:09:02 +00:00
cryptlib.c Avoid Windows 8 Getversion deprecated errors. 2014-02-25 13:40:33 +00:00
cryptlib.h Add a symbol for the first parameter to OPENSSL_showfatal(). 2011-06-23 09:46:27 +00:00
crypto-lib.com Move CT viewer extension code to crypto/x509v3 2014-02-20 18:48:56 +00:00
crypto.h Move gmtime functions to crypto.h. 2014-02-19 18:02:04 +00:00
cversion.c
ebcdic.c
ebcdic.h
ex_data.c Avoid warnings with -pedantic, specifically: 2008-07-04 23:12:52 +00:00
fips_err.h Check for selftest failure in various places. 2011-10-22 17:24:27 +00:00
fips_ers.c Rename crypto/fips_err.c to fips_ers.c to avoid clash with other fips_err.c 2011-02-03 16:16:30 +00:00
ia64cpuid.S IA-64 assembler pack: fix typos and make it work on HP-UX. 2011-05-07 20:36:05 +00:00
install-crypto.com After some adjustments, apply the changes OpenSSL 1.0.0d on OpenVMS 2011-03-19 10:58:14 +00:00
lock.c Include support for an add_lock callback to tiny FIPS locking API. 2011-02-14 17:05:42 +00:00
LPdir_nyi.c
LPdir_unix.c Import changed files from LPlib. The changes are logged as follows 2004-09-23 22:11:39 +00:00
LPdir_vms.c After some adjustments, apply the changes OpenSSL 1.0.0d on OpenVMS 2011-03-19 10:58:14 +00:00
LPdir_win.c Fix mingw warnings. 2006-10-23 07:41:05 +00:00
LPdir_win32.c Import changed files from LPlib. The changes are logged as follows 2004-09-23 22:11:39 +00:00
LPdir_wince.c Import changed files from LPlib. The changes are logged as follows 2004-09-23 22:11:39 +00:00
Makefile make depend 2014-02-19 20:09:08 +00:00
md32_common.h Please Clang's sanitizer. 2014-07-08 22:24:44 +02:00
mem.c Version skew reduction: trivia (I hope). 2012-06-03 22:00:21 +00:00
mem_clr.c Fix warning. 2007-06-23 18:47:51 +00:00
mem_dbg.c Updates from 1.0.0-stable branch. 2009-04-20 11:33:12 +00:00
o_dir.c
o_dir.h
o_dir_test.c
o_fips.c Implement FIPS_mode and FIPS_mode_set 2011-05-19 18:09:02 +00:00
o_init.c remove unnecessary attempt to automatically call OPENSSL_init 2012-07-01 22:25:04 +00:00
o_str.c Improve WINCE support. 2013-01-19 21:23:13 +01:00
o_str.h "Overload" SunOS 4.x memcmp, which ruins ASN1_OBJECT table lookups. 2005-09-20 20:19:07 +00:00
o_time.c Move gmtime functions to crypto.h. 2014-02-19 18:02:04 +00:00
opensslconf.h.in Eliminate warning induced by http://cvs.openssl.org/chngview?cn=14690 and 2005-12-16 10:37:24 +00:00
opensslv.h HEAD is now 1.1.0 2009-03-31 10:38:37 +00:00
ossl_typ.h Add KDF for DH. 2013-08-05 15:45:01 +01:00
pariscid.pl PA-RISC assembler pack: switch to bve in 64-bit builds. 2013-06-18 10:37:00 +02:00
ppc_arch.h Engage GHASH for PowerISA 2.0.7. 2014-07-20 14:16:31 +02:00
ppccap.c Engage GHASH for PowerISA 2.0.7. 2014-07-20 14:16:31 +02:00
ppccpuid.pl aesp8-ppc.pl: fix typos. 2014-06-04 08:34:18 +02:00
s390xcap.c s390x assembler pack: extend OPENSSL_s390xcap_P to 128 bits. 2010-09-18 08:46:53 +00:00
s390xcpuid.S Multiple assembler packs: add experimental memory bus instrumentation. 2011-04-17 12:46:00 +00:00
sparc_arch.h Support for SPARC T4 MONT[MUL|SQR] instructions. 2012-11-17 10:34:11 +00:00
sparccpuid.S sparccpuid.S: work around emulator bug on T1. 2013-02-11 10:39:50 +01:00
sparcv9cap.c sparcv9cap.c: omit random detection. 2013-12-28 13:31:14 +01:00
symhacks.h Remove all RFC5878 code. 2014-07-04 13:26:35 +01:00
thr_id.c Fix warning. 2012-09-17 17:21:58 +00:00
uid.c
vms_rms.h After some adjustments, apply the changes OpenSSL 1.0.0d on OpenVMS 2011-03-19 10:58:14 +00:00
x86_64cpuid.pl x86[_64]cpuid.pl: add low-level RDSEED. 2014-02-14 17:24:12 +01:00
x86cpuid.pl x86[_64]cpuid.pl: add low-level RDSEED. 2014-02-14 17:24:12 +01:00