openssl/crypto/dsa
Dr. Stephen Henson ccb2a61407 Fix double free in DSA private key parsing.
Fix double free bug when parsing malformed DSA private keys.

Thanks to Adam Langley (Google/BoringSSL) for discovering this bug using
libFuzzer.

CVE-2016-0705

Reviewed-by: Emilia Käsper <emilia@openssl.org>
(cherry picked from commit 6c88c71b4e)
2016-02-19 14:04:21 +00:00
..
dsa.h Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
dsa_ameth.c Fix double free in DSA private key parsing. 2016-02-19 14:04:21 +00:00
dsa_asn1.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
dsa_depr.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
dsa_err.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
dsa_gen.c Remove useless code 2015-10-23 20:47:53 +02:00
dsa_key.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
dsa_lib.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
dsa_locl.h Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
dsa_ossl.c Fix memory leak in DSA redo case. 2015-12-22 11:54:42 +01:00
dsa_pmeth.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
dsa_prn.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
dsa_sign.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
dsa_vrf.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
dsagen.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
dsatest.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
fips186a.txt Import of old SSLeay release: SSLeay 0.8.1b 1998-12-21 10:52:47 +00:00
Makefile Fix the update target and remove duplicate file updates 2015-05-23 11:22:10 +02:00
README Import of old SSLeay release: SSLeay 0.8.1b 1998-12-21 10:52:47 +00:00

The stuff in here is based on patches supplied to me by
Steven Schoch <schoch@sheba.arc.nasa.gov> to do DSS.
I have since modified a them a little but a debt of gratitude
is due for doing the initial work.