wbrawner/openssl
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
openssl/crypto/asn1
History
Emilia Kasper 0042fb5fd1 Fix OID handling: 
- Upon parsing, reject OIDs with invalid base-128 encoding.
- Always NUL-terminate the destination buffer in OBJ_obj2txt printing function.

CVE-2014-3508

Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
Reviewed-by: Kurt Roeckx <kurt@openssl.org>
Reviewed-by: Tim Hudson <tjh@openssl.org>
2014-08-06 20:36:41 +01:00
..
.cvsignore
a_bitstr.c Revert the size_t modifications from HEAD that had led to more 2008-11-12 03:58:08 +00:00
a_bool.c Revert the size_t modifications from HEAD that had led to more 2008-11-12 03:58:08 +00:00
a_bytes.c PR: 1835 2009-02-14 21:49:38 +00:00
a_d2i_fp.c Check for potentially exploitable overflows in asn1_d2i_read_bio 2012-04-19 16:19:56 +00:00
a_digest.c Audit libcrypto for unchecked return values: fix all cases enountered 2009-09-23 23:43:49 +00:00
a_dup.c PR: 1644 2009-09-06 15:49:46 +00:00
a_enum.c
a_gentm.c Remove references to o_time.h 2014-02-19 20:06:13 +00:00
a_i2d_fp.c
a_int.c Encode INTEGER correctly. 2013-03-18 14:22:08 +00:00
a_mbstr.c Fix unitialized warnings 2009-10-04 16:52:51 +00:00
a_object.c Fix OID handling: 2014-08-06 20:36:41 +01:00
a_octet.c Revert the size_t modifications from HEAD that had led to more 2008-11-12 03:58:08 +00:00
a_print.c Revert the size_t modifications from HEAD that had led to more 2008-11-12 03:58:08 +00:00
a_set.c Update from 1.0.0-stable. 2009-07-27 21:22:02 +00:00
a_sign.c add X509_CRL_sign_ctx function 2010-03-14 12:52:38 +00:00
a_strex.c Fix Valgrind warning. 2012-09-24 19:49:16 +00:00
a_strnid.c Set default global mask to UTF8 only. 2014-06-01 15:03:00 +01:00
a_time.c Remove references to o_time.h 2014-02-19 20:06:13 +00:00
a_type.c
a_utctm.c Memory leak and NULL dereference fixes. 2014-06-27 14:35:07 +01:00
a_utf8.c Revert the size_t modifications from HEAD that had led to more 2008-11-12 03:58:08 +00:00
a_verify.c Don't try and verify signatures if key is NULL (CVE-2013-0166) 2014-04-01 16:37:51 +01:00
ameth_lib.c Memory leak and NULL dereference fixes. 2014-06-27 14:35:07 +01:00
asn1.h Add KDF for DH. 2013-08-05 15:45:01 +01:00
asn1_err.c Fix various spelling errors 2014-02-14 22:29:12 +00:00
asn1_gen.c New config module for string tables. This can be used to add new 2012-10-22 13:05:54 +00:00
asn1_lib.c ASN1 sanity check. 2014-07-02 00:59:26 +01:00
asn1_locl.h Add functions returning security bits. 2014-03-28 14:49:04 +00:00
asn1_mac.h Revert the size_t modifications from HEAD that had led to more 2008-11-12 03:58:08 +00:00
asn1_par.c PR: 2056 2009-10-01 00:11:04 +00:00
asn1t.h Revert the size_t modifications from HEAD that had led to more 2008-11-12 03:58:08 +00:00
asn_mime.c Memory leak and NULL dereference fixes. 2014-06-27 14:35:07 +01:00
asn_moid.c Update obsolete email address... 2008-11-05 18:39:08 +00:00
asn_mstbl.c oops, add missing asn_mstbl.c 2012-10-24 13:27:46 +00:00
asn_pack.c Memory leak and NULL dereference fixes. 2014-06-27 14:35:07 +01:00
bio_asn1.c Memory leak and NULL dereference fixes. 2014-06-27 14:35:07 +01:00
bio_ndef.c no need to include memory.h 2011-04-30 23:37:42 +00:00
charmap.h
charmap.pl Add license info. 2014-07-04 18:41:45 +01:00
d2i_pr.c Revert the size_t modifications from HEAD that had led to more 2008-11-12 03:58:08 +00:00
d2i_pu.c PR: 2088 2009-11-12 19:56:56 +00:00
evp_asn1.c Memory leak and NULL dereference fixes. 2014-06-27 14:35:07 +01:00
f_enum.c
f_int.c
f_string.c
i2d_pr.c
i2d_pu.c
Makefile make depend 2014-02-19 20:09:08 +00:00
n_pkey.c Fix warnings. 2010-06-12 14:13:23 +00:00
nsseq.c Update obsolete email address... 2008-11-05 18:39:08 +00:00
p5_pbe.c Update obsolete email address... 2008-11-05 18:39:08 +00:00
p5_pbev2.c Fix memory leak. 2011-02-07 13:34:00 +00:00
p8_pkey.c Update obsolete email address... 2008-11-05 18:39:08 +00:00
t_bitst.c Update obsolete email address... 2008-11-05 18:39:08 +00:00
t_crl.c Fix warnings. 2010-06-12 14:13:23 +00:00
t_pkey.c
t_req.c
t_spki.c Update obsolete email address... 2008-11-05 18:39:08 +00:00
t_x509.c Memory leak and NULL dereference fixes. 2014-06-27 14:35:07 +01:00
t_x509a.c Update obsolete email address... 2008-11-05 18:39:08 +00:00
tasn_dec.c Fix warnings. 2010-06-12 14:13:23 +00:00
tasn_enc.c Memory leak and NULL dereference fixes. 2014-06-27 14:35:07 +01:00
tasn_fre.c Update obsolete email address... 2008-11-05 18:39:08 +00:00
tasn_new.c PR: 2013 2009-09-02 13:54:50 +00:00
tasn_prn.c ans1/tasn_prn.c: avoid bool in variable names. 2012-03-29 17:48:19 +00:00
tasn_scn.c Fix error codes. 2011-02-03 10:03:23 +00:00
tasn_typ.c Update obsolete email address... 2008-11-05 18:39:08 +00:00
tasn_utl.c misspellings fixes by https://github.com/vlajos/misspell_fixer 2013-09-05 21:39:42 +01:00
x_algor.c New function X509_ALGOR_set_md() to set X509_ALGOR (DigestAlgorithmIdentifier) 2010-03-11 13:27:05 +00:00
x_attrib.c
x_bignum.c Update obsolete email address... 2008-11-05 18:39:08 +00:00
x_crl.c Tolerate critical AKID in CRLs. 2014-06-27 18:49:32 +01:00
x_exten.c Update obsolete email address... 2008-11-05 18:39:08 +00:00
x_info.c
x_long.c Update obsolete email address... 2008-11-05 18:39:08 +00:00
x_name.c PR: 2736 2012-02-27 18:45:28 +00:00
x_nx509.c Update obsolete email address... 2008-11-05 18:39:08 +00:00
x_pkey.c Revert the size_t modifications from HEAD that had led to more 2008-11-12 03:58:08 +00:00
x_pubkey.c PR: 2813 2012-05-11 13:53:37 +00:00
x_req.c
x_sig.c
x_spki.c
x_val.c
x_x509.c New functions to retrieve certificate signatures and signature OID NID. 2012-06-13 13:08:12 +00:00
x_x509a.c Support setting of "no purpose" for trust. 2013-11-11 22:39:23 +00:00